ETERNUS SF by Fsas Technologies Inc. has a vulnerability due to incorrect default permissions. This flaw allows a low-privileged user with access to the management server to obtain database credentials. Exploiting this could enable execution of operating system commands with administrator privileges, posing a high security risk.