Synopsis
A web application is protected using default administrative credentials.
Description
The remote HP Integrated Lights-Out (iLO) install uses a default set of credentials ('Admin' / 'Admin' or 'Oper' / 'Oper') to control access to its management interface.
With this information, an attacker can gain access to the application.
Solution
Log into the application and change the default login credentials.
Plugin Details
File Name: ilo_web_default_creds.nasl
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/o:hp:integrated_lights-out
Required KB Items: www/ilo
Excluded KB Items: global_settings/supplied_logins_only