ID de Prueba:	1.3.6.1.4.1.25623.1.0.111006
Categoría:	Default Accounts
Título:	Apache Axis2 Default Credentials (HTTP) - Active Check
Resumen:	The remote Apache Axis2 web interface is using known default; credentials.
Descripción:	Summary: The remote Apache Axis2 web interface is using known default credentials. Vulnerability Insight: It was possible to login with default credentials: admin/axis2 Vulnerability Impact: This issue may be exploited by a remote attacker to gain access to sensitive information, modify system configuration or execute code by uploading malicious webservices. Solution: Change the password. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0219 Bugtraq: 20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password (Google Search) http://www.securityfocus.com/archive/1/514284/100/0/threaded CERT/CC vulnerability note: VU#989719 http://www.kb.cert.org/vuls/id/989719 http://www.exploit-db.com/exploits/15869 http://retrogod.altervista.org/9sg_ca_d2d.html http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf http://www.rapid7.com/security-center/advisories/R7-0037.jsp https://service.sap.com/sap/support/notes/1432881 http://www.osvdb.org/70233 http://www.securitytracker.com/id?1024929 http://secunia.com/advisories/41799 http://secunia.com/advisories/42763 http://www.vupen.com/english/advisories/2010/2673 XForce ISS Database: businessobjects-dswsbobje-security-bypass(62523) https://exchange.xforce.ibmcloud.com/vulnerabilities/62523
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.