ID de Prueba:	1.3.6.1.4.1.25623.1.0.804414
Categoría:	Gain a shell remotely
Título:	Quantum DXi Remote 'root' Authentication Bypass Vulnerability
Resumen:	Quantum DXi is prone to an authentication bypass vulnerability.
Descripción:	Summary: Quantum DXi is prone to an authentication bypass vulnerability. Vulnerability Insight: - The root user has a hardcoded password that is unknown and not changeable. Normally access is only through the restricted shells. - The /root/.ssh/authorized_keys on the appliance contains the static private ssh key. Using this key on a remote system to login through SSH will give a root shell. Vulnerability Impact: Successful exploitation will allow attacker to gain unauthorized root access to affected devices and completely compromise the devices. Affected Software/OS: Quantum DXi V1000 2.2.1 and below. Solution: Upgrade to Quantum DXi V1000 2.3.0.1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.