ThoughtWorks GoCD Default Administrator Access

critical Nessus Plugin ID 157069

Language:

Synopsis

The web application running on the remote host allows administrator access by default.

Description

The web application running on the remote host allows administrator access by default. Any user that reaches the web applicaiton will have full admistrator access to the web application.

Solution

Configure authentication on the web application.

Plugin Details

Severity: Critical

ID: 157069

File Name: gocd_default_access.nbin

Version: 1.51

Type: remote

Family: CGI abuses

Published: 1/25/2022

Updated: 11/12/2024

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Tenable score for default credentials.

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: manual

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:thoughtworks:gocd

Required KB Items: installed_sw/GoCD

Detections

Analytics