Hyperic HQ Web GUI Default Credentials

high Nessus Plugin ID 45358

Synopsis

The remote web application uses default credentials.

Description

It is possible to log into the remote Hyperic HQ installation using its default credentials.

A remote attacker could exploit this to gain administrative control of the application.

Solution

Secure the 'hqadmin' account with a strong password.

Plugin Details

Severity: High

ID: 45358

File Name: hyperic_hq_web_default_creds.nasl

Version: 1.10

Type: remote

Family: CGI abuses

Published: 3/26/2010

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: www/hyperic_hq

Excluded KB Items: global_settings/supplied_logins_only