Detections
Analytics

Openfiler Management Interface Default Administrator Credentials

high Nessus Plugin ID 51460

Language:

Synopsis

A web application is protected using default administrative credentials.

Description

The remote Openfiler install uses a default set of credentials ('openfiler' / 'password') to control access to its management interface.

With this information, an attacker can gain administrative access to the application.

Solution

Log into the Openfiler management interface and change the Admin password.

Plugin Details

Severity: High

ID: 51460

File Name: openfiler_default_creds.nasl

Version: 1.10

Type: remote

Family: CGI abuses

Published: 1/12/2011

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: www/openfiler

Excluded KB Items: global_settings/supplied_logins_only