cmty-http-tomcat-passwordlist.xml

<?xml version="1.0" encoding="UTF-8"?>
<Vulnerability id="cmty-http-tomcat-passwordlist" published="2015-11-09" added="2015-11-09" modified="2015-11-09" version="1.0">
  <name>Weak Tomcat User and Password</name>
  <severity>10</severity>
  <cvss>(AV:N/AC:L/Au:N/C:C/I:C/A:C)</cvss>
  <Tags>
    <tag>Apache</tag>
    <tag>Apache Tomcat</tag>
    <tag>Remote Execution</tag>
    <tag>Web</tag>
  </Tags>
  <AlternateIds>
  </AlternateIds>
  <Description>
    <p>The admin account uses a known weak password.  This would allow
      anyone to log into the machine via HTTP.</p>
  </Description>
  <Solutions>
    <Solution id="cmty-http-weak-admin" time="15m">
      <summary>Fix known admin password</summary>
      <workaround>
        <p>
          The current password should be evaluated for change.
                password list used during this check
                user: admin

                Passwords:
                admin+admin
        </p>
      </workaround>
    </Solution>
  </Solutions>
</Vulnerability>