Test Kennung:	1.3.6.1.4.1.25623.1.0.111006
Kategorie:	Default Accounts
Titel:	Apache Axis2 Default Credentials (HTTP) - Active Check
Zusammenfassung:	The remote Apache Axis2 web interface is using known default; credentials.
Beschreibung:	Summary: The remote Apache Axis2 web interface is using known default credentials. Vulnerability Insight: It was possible to login with default credentials: admin/axis2 Vulnerability Impact: This issue may be exploited by a remote attacker to gain access to sensitive information, modify system configuration or execute code by uploading malicious webservices. Solution: Change the password. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0219 Bugtraq: 20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password (Google Search) http://www.securityfocus.com/archive/1/514284/100/0/threaded CERT/CC vulnerability note: VU#989719 http://www.kb.cert.org/vuls/id/989719 http://www.exploit-db.com/exploits/15869 http://retrogod.altervista.org/9sg_ca_d2d.html http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf http://www.rapid7.com/security-center/advisories/R7-0037.jsp https://service.sap.com/sap/support/notes/1432881 http://www.osvdb.org/70233 http://www.securitytracker.com/id?1024929 http://secunia.com/advisories/41799 http://secunia.com/advisories/42763 http://www.vupen.com/english/advisories/2010/2673 XForce ISS Database: businessobjects-dswsbobje-security-bypass(62523) https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.