BrightStor ARCserve/Enterprise Backup Default Account
Critical Nessus Network Monitor Plugin ID 2622
SynopsisThe remote host is configured with default or easily-guessed credentials.
DescriptionThe remote host is running UniversalAgent, an agent used by BrightStor ARCserve to perform backups. The remote version of this agent contains a default account with the username '\x02root\x03' and password '\x02<%j8U]`~+Ri\x03'. An attacker may use this account to gain full access to the remote host.
SolutionUpgrade or patch according to vendor recommendations.