F-Secure Internet Gatekeeper Default Administrator Credentials

high Nessus Plugin ID 52025

Synopsis

A web application is protected using default administrative credentials.

Description

The remote F-Secure Internet Gatekeeper install uses a default set of credentials ('admin' / 'admin') to control access to its Web Console.

With this information, an attacker can gain administrative access to the application.

Solution

Log into the Web Console, click 'Admin password', and change the password.

Plugin Details

Severity: High

ID: 52025

File Name: fsecure_igk_default_creds.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 2/18/2011

Updated: 6/5/2024

Supported Sensors: Nessus

Enable CGI Scanning: true

Vulnerability Information

CPE: cpe:/a:f-secure:internet_gatekeeper

Required KB Items: www/fsecure_igk

Excluded KB Items: Settings/disable_cgi_scanning, global_settings/supplied_logins_only