ManageEngine OpStor Default Administrator Credentials

high Nessus Plugin ID 62783

Synopsis

A web application is protected using default administrative credentials.

Description

The remote ManageEngine OpStor install uses a default set of credentials ('admin' / 'admin') to control access to its management interface.

With this information, an attacker can gain administrative access to the application.

Solution

Log into the application and change the default login credentials.

Plugin Details

Severity: High

ID: 62783

File Name: manageengine_opstor_default_creds.nasl

Version: 1.9

Type: remote

Family: CGI abuses

Published: 11/1/2012

Updated: 6/5/2024

Supported Sensors: Nessus

Enable CGI Scanning: true

Vulnerability Information

CPE: cpe:/a:zohocorp:manageengine_opstor

Required KB Items: www/manageengine_opstor

Excluded KB Items: Settings/disable_cgi_scanning, global_settings/supplied_logins_only