ID de Prueba:	1.3.6.1.4.1.25623.1.0.111006
Categoría:	Default Accounts
Título:	Apache Axis2 axis2-admin default credentials
Resumen:	The remote Apache Axi2 web interface is prone to a default account; authentication bypass vulnerability.
Descripción:	Summary: The remote Apache Axi2 web interface is prone to a default account authentication bypass vulnerability. Vulnerability Insight: It was possible to login with default credentials: admin/axis2 Vulnerability Impact: This issue may be exploited by a remote attacker to gain access to sensitive information, modify system configuration or execute code by uploading malicious webservices. Solution: Change the password. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 44055 Common Vulnerability Exposure (CVE) ID: CVE-2010-0219 Bugtraq: 20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password (Google Search) http://www.securityfocus.com/archive/1/514284/100/0/threaded CERT/CC vulnerability note: VU#989719 http://www.kb.cert.org/vuls/id/989719 http://www.exploit-db.com/exploits/15869 http://retrogod.altervista.org/9sg_ca_d2d.html http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf http://www.rapid7.com/security-center/advisories/R7-0037.jsp https://service.sap.com/sap/support/notes/1432881 http://www.osvdb.org/70233 http://www.securitytracker.com/id?1024929 http://secunia.com/advisories/41799 http://secunia.com/advisories/42763 http://www.vupen.com/english/advisories/2010/2673 XForce ISS Database: businessobjects-dswsbobje-security-bypass(62523) https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
Copyright	This script is Copyright (C) 2015 SCHUTZWERK GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.