Security Advisory

CVE-2015-3001

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-06-08 14:00:00
Last updated 2024-08-06 05:32:21
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.