Smartmin has a universal password

[hmx222]

Smartmin has a universal password

Download the latest file

Download the latest source code on GitHub

Find the universal password

In net.lab1024.sa.admin.module.system.login.serviceUnderLoginService#getLoginResult:

//Universal password login, no need to set mandatory password change
String loginIdByToken = (String) StpUtil.getLoginIdByToken(token);
if (loginIdByToken != null && loginIdByToken.startsWith(SUPER_PASSWORD_LOGIN_ID_PREFIX)) {
loginResultVO.setNeedUpdatePwdFlag(false);
}

The password can be debugged through debugging, which involves security issues and is temporarily not publicly available.

Repair suggestions

Just delete the above code.