SecurityFocus

hidden admin user on every HP MSA2000 G3 Dec 13 2010 02:08PM
hpdisclosure anonmail de (2 replies)

Re: hidden admin user on every HP MSA2000 G3 Dec 15 2010 05:05PM
Pavel Kankovsky (peak argo troja mff cuni cz)

Re: hidden admin user on every HP MSA2000 G3 Dec 13 2010 07:55PM
nightfighter anonmail de

Can anyone confirm this vulnerabilty?
I don't have a MSA for testing at the moment.

> Hi,
>
> i just found out that there is a hidden user on every HP MSA2000 G3
> SAN out there:
>
> username: admin
> password: !admin
>
> this user doesnt show up in the user manager, and the password
> cannot be changed - looks like the perfect backdoor for everybody.
>
>
>

[ reply ]