The vulnerability in Eclipse aeriOS Identity Manager arises from insecure default deployment configurations that expose Keycloak and PostgreSQL services on network interfaces with fixed default credentials. Attackers able to reach these services can use published default credentials to gain administrative access to the Identity Manager or direct database access. This exposure risks unauthorized access or modification of sensitive identity-management data, including users, roles, client credentials, sessions, and cryptographic material, and may allow creation of privileged identities or tokens. The vendor addressed the issue by generating random Keycloak administrator passwords by default, managing credentials via Kubernetes Secrets, restricting PostgreSQL and OpenLDAP services to internal access, and updating documentation to warn against using predefined development users in production.

An attacker with network access to the exposed services can use default credentials to obtain administrative control over the Identity Manager or direct database access. This can lead to unauthorized disclosure and modification of sensitive identity data, including user accounts, roles, client credentials, sessions, and cryptographic keys. The attacker could also create privileged identities or tokens that other components trust, severely compromising system security and integrity.

The vendor has implemented mitigations including random generation of Keycloak administrator passwords by default, managing Keycloak and PostgreSQL credentials through Kubernetes Secrets, and restricting PostgreSQL and OpenLDAP services to internal-only access in both Helm chart and Docker Compose deployments. Additionally, documentation now explicitly warns operators not to use predefined development and testing user credentials in production and to remove or change them after installation. Users should upgrade to the fixed deployment configurations and follow the updated documentation guidance. Patch status is not explicitly confirmed; check the vendor advisory for current remediation guidance.