Information disclosure in Vdgsecurity Vdg Sense
CVE-2014-9576
VDG Security SENSE (formerly DIVA) 2.3.13 has a hardcoded password of (1) ArpaRomaWi for the root Postgres account and !DVService for the (2) postgres and (3) NTP Windows user accounts, which allows remote attackers to obtain access.
Vulnerability class: Information Disclosure
EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.
Affected products
- Vdgsecurity Vdg_sense — versions 2.3.13
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_MISC)