Security Advisory

CVE-2017-15366

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-26 20:00:00

Last updated 2024-08-05 19:57:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devices (if no firewall is present) or the NDoc server itself. Once the password is known to an attacker, local access is not required.

← Browse all CVEs View on cve.org ↗