CVE-2002-0774 Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hosting controller | = 1.1 | No fix listed |
| hosting controller | = 1.3 | No fix listed |
| hosting controller | = 1.4 | No fix listed |
| hosting controller | = 1.4.1 | No fix listed |
| hosting controller | = 1.4b | No fix listed |
References
- 20020519 Another vulnerability in hosting controller mailing-list vendor-advisory
- hosting-controller-default-account(9131) patch vdb-entry vendor-advisory
- 4779 patch vdb-entry vendor-advisory