ManageEngine ServiceDesk Plus Default Administrator Credentials

high Nessus Plugin ID 55445

Language:

Synopsis

A web application is protected using default administrative credentials.

Description

The remote ManageEngine ServiceDesk Plus install uses a default set of credentials ('administrator' / 'administrator') to control access to its management interface.

With this information, an attacker can gain administrative access to the application.

Solution

Log into the application, click 'Personalize' followed by 'Change Password', and change the password.

Plugin Details

Severity: High

ID: 55445

File Name: manageengine_servicedesk_default_creds.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 6/28/2011

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:zohocorp:manageengine_adselfservice_plus

Required KB Items: www/manageengine_servicedesk

Excluded KB Items: global_settings/supplied_logins_only

Detections

Analytics