106124

20181204 Cisco Energy Management Suite Default PostgreSQL Password Vulnerability

https://www.tenable.com/security/research/tra-2018-42

The version of Cisco Energy Management Suite installed on the remote host is prior to 5.2.3. It, therefore, potentially has a default password for the postgres account for the bundled PostgresSQL database. An unauthenticated, local attacker can exploit this to gain privileged or administrator access to the database.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2018-0468

high

Tenable Plugins

high