Vulnerability
vulnerability:admin_admin_default_credentials
Also: admin/admin
A critical authentication weakness in which the medical provider’s website accepted the username admin with the password admin.
A critical authentication weakness in which the medical provider’s website accepted the username admin with the password admin.
“he tried to log in as the username admin with the password admin and it worked.”
“With admin/admin you could access to all of that”
Use of the username admin with the password admin, cited as a longstanding insecure configuration.
“computers using the username admin and the password admin”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Alberto Hill | Explicit | 25 |
| incoming | EXPLOITS | Alberto Hill | Explicit | 25 |
admin/admin default credentials DISCOVERED_BY Alberto Hill
Alberto discovered that the medical provider's website accepted admin/admin as administrator credentials.
Explicit Confidence 99% · Jack Rhysider EP 25 Details
“Just for fun he tried to log in as the username admin with the password admin and it worked.”
Alberto Hill EXPLOITS admin/admin default credentials
Alberto used the admin/admin default credentials to access the medical facility's systems while investigating and reporting the vulnerability.
Explicit Confidence 98% · Alberto Hill EP 25 Details
“I mean, admin/admin, and I had access to all the systems”