Visual Mining NetCharts Server Default Credentials (Web UI)

high Nessus Plugin ID 80084

Language:

Synopsis

The remote web application uses default credentials.

Description

It is possible to log into the remote Visual Mining NetCharts Server installation by providing the default credentials. A remote, unauthenticated attacker can exploit this to gain administrative control.

Solution

Contact the vendor to see if patches are available. If patches are unavailable, restrict access to the web service.

Plugin Details

Severity: High

ID: 80084

File Name: visual_mining_netcharts_server_web_default_creds.nasl

Version: 1.4

Type: remote

Family: CGI abuses

Published: 12/17/2014

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:visual_mining:netcharts_server

Required KB Items: installed_sw/Visual Mining NetCharts Server

Excluded KB Items: global_settings/supplied_logins_only

Detections

Analytics