Detections
Analytics
CVE-2015-3001
high
Description
SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
References
https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
http://www.securityfocus.com/bid/75035
http://www.securityfocus.com/archive/1/535679/100/0/threaded