ManageEngine Desktop Central Default Administrator Credentials

high Nessus Plugin ID 71219

Synopsis

A web application is protected using default administrative credentials.

Description

The ManageEngine Desktop Central application running on the remote host uses a default set of credentials to control access to its management interface. An attacker can exploit this vulnerability to gain administrative access to the application.

Solution

Change the default 'admin' login credentials.

Plugin Details

Severity: High

ID: 71219

File Name: manageengine_desktop_central_default_creds.nasl

Version: 1.6

Type: remote

Family: CGI abuses

Published: 12/4/2013

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:zohocorp:manageengine_desktop_central

Required KB Items: installed_sw/ManageEngine Desktop Central

Excluded KB Items: global_settings/supplied_logins_only