Description
Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.
References
- oncommand-multiple-default-accounts(17447) vdb-entry
- 11225 vdb-entry
- http://www.sarc.com/avcenter/security/Content/2004.09.29.html
- 12604 third-party-advisory
- 20040920 Default username/password pairs in ON Command CCM 5.x database mailing-list