Centreon Default Administrator Password

high Nessus Plugin ID 80225

Language:

Synopsis

A web application is protected using default administrative credentials.

Description

The remote Centreon install uses a default set of credentials ('admin' / 'centreon') to control access to its management interface. An attacker can leverage this issue to gain administrative access to the application.

Solution

Log into the application and change the default login credentials.

Plugin Details

Severity: High

ID: 80225

File Name: centreon_default_creds.nasl

Version: 1.5

Type: remote

Family: CGI abuses

Published: 12/23/2014

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:centreon:centreon, cpe:/a:merethis:centreon

Required KB Items: www/PHP, installed_sw/Centreon

Excluded KB Items: global_settings/supplied_logins_only

Detections

Analytics