Detections
Analytics
Brightmail Control Center Default Password (symantec) for 'admin' Account
high Nessus Plugin ID 19598
Language:
Synopsis
The remote server uses known authentication credentials.Description
The remote host is running Symantec's Brightmail Control Center, a web-based administration tool for Brightmail AntiSpam.The installation of Brightmail Control Center on the remote host still has an account 'admin' with the default password 'symantec'. An attacker can exploit this issue to gain access of the Control Center and any scanners it controls.
Solution
Log in to the Brightmail Control Center and change the password for the 'admin' user.Plugin Details
Severity: High
ID: 19598
File Name: brightmail_antispam_default_password.nasl
Version: 1.15
Type: remote
Family: CGI abuses
Published: 9/8/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Vulnerability Information
Excluded KB Items: global_settings/supplied_logins_only