CVE-2011-5322 Hardcoded credentials in n/a
GE Healthcare Centricity Analytics Server uses hardcoded default passwords for SQL and Webmin accounts, allowing unauthorized access and potential privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-5322?
CVE-2011-5322 is a critical vulnerability in n/a, published on 4 Aug 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.
Weakness: CWE-255
Which versions are affected by CVE-2011-5322?
It affects 1 product.
Products include Gehealthcare Centricity Analytics Server.
How do I fix CVE-2011-5322?
No fix has been published for CVE-2011-5322 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-5322 being exploited?
There is no known exploitation of CVE-2011-5322 in the wild and no public exploit code.
Sources
Also known as GHSA-5cwq-frjr-7c95.