Threats Tagged 'cwe-1392'

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that component's administrative interface to anyone aware of the default value.

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value will use the known default, allowing an attacker aware of the default to forge valid authentication cookies for that component.

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 contain a critical vulnerability due to the use of default credentials. This flaw could allow a remote attacker to gain administrative access without authentication. The vulnerability is identified as CWE-1392 and has a CVSS v3.1 score of 9.8, indicating a high severity with full confidentiality, integrity, and availability impact.

Eclipse aeriOS's Identity Manager deployment in its current development version had insecure default configurations and credentials, exposing Keycloak and PostgreSQL services via Kubernetes NodePort and Docker Compose. Default fixed credentials allowed administrative access, risking unauthorized access or modification of identity data. The issue is addressed by randomizing passwords, using Kubernetes Secrets, restricting service exposure, and warning against using predefined development users in production.

CVE-2026-76155 is a critical vulnerability in Datiphy Inc.'s Data Management Center versions 8.3.0 through 8.5.1. It involves the use of default administrator credentials, allowing a remote attacker to gain administrative access without authentication. This vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact. No patch or vendor advisory information is provided regarding remediation. The product is not a cloud service, so remediation depends on vendor or user action.

A vulnerability in ANDRITZ HIPASE-250 engineering workstations involves a provisioning script that sets a fixed, hard-coded x11vnc password. This password is identical across all workstations provisioned with this script. An attacker with adjacent-network access who knows this password can gain unauthorized VNC access to affected workstations.

CVE-2026-68503 is a critical vulnerability in the LazyOwn RedTeam/APT Framework prior to version 0.2.154. The software shipped with default C2 credentials ('LazyOwn'/'LazyOwn') hardcoded in configuration files and used without change for HTTP Basic authentication. This allows any attacker with network access who knows these default credentials to gain operator-level access to the C2 dashboard. The issue is fixed in version 0.2.154.

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token and invoke certain APIs to read and modify data. Successful exploitation results in high impact on confidentiality and integrity, with no impact on availability.