Threats tagged 'ghsa-fgmc-2hqj-86v4'

Vantage6 versions prior to 5.0.0 create an initial administrative user with a default username 'root' and password 'root'. This default credential is weak and widely known, increasing the risk that attackers could gain administrative access if the password is not changed. No official patch is available, but a workaround involves deleting the default 'root' user after creating other users. A temporary mitigation includes setting the initial root password via an environment variable or configuration file to avoid using the default password.