Sybase SQL-Anywhere Database Server Default Credentials

High Nessus Network Monitor Plugin ID 5150

Synopsis

The remote host is configured with default or easily-guessed credentials

Description

The remote web server is running the Sybase SQL-Anywhere database server with default credentials. That is, the Sybase SQL Anywhere server ships with the default administrative credentials of 'dba/sql'. The PVS has just observed a user logging in using those credentials.

Solution

Change the credentials and require an encrypted login

Plugin Details

Severity: High

ID: 5150

Family: Database

Published: 2004/08/18

Modified: 2017/03/01

Dependencies: 5148

Risk Information

Risk Factor: High