Detections
Analytics
Mura CMS Default Administrator Credentials
high Nessus Plugin ID 49698
Language:
Synopsis
A web application is protected using default administrative credentials.Description
The remote Mura CMS install uses a default set of credentials ('admin' / 'admin') to control access to the Mura Admin.With this information, an attacker can gain administrative access to the application.
Solution
Log into the Mura Admin, select 'Edit Profile', and change the password.Plugin Details
Severity: High
ID: 49698
File Name: mura_cms_default_creds.nasl
Version: 1.11
Type: remote
Family: CGI abuses
Published: 9/30/2010
Updated: 6/1/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/mura_cms
Excluded KB Items: global_settings/supplied_logins_only