cmty-ssh-default-account-confluence-password-confluence.xml

<?xml version="1.0" encoding="UTF-8"?>
<Vulnerability id="cmty-ssh-default-account-confluence-password-confluence" published="2018-01-09" added="2018-01-09" modified="2018-01-09" version="2.0">
  <name>Default ssh account: confluence password "<![CDATA[confluence]]>"</name>
  <severity>10</severity>
  <cvss>(AV:N/AC:L/Au:N/C:C/I:C/A:C)</cvss>
  <Tags>
    <tag>Default Account</tag>
    <tag>SSH</tag>
  </Tags>
  <AlternateIds>
  </AlternateIds>

  <Description>
    <p>The confluence account uses a password of &quot;<![CDATA[confluence]]>&quot;.  This would allow
      anyone to log into the machine via SSH and take complete
      control.</p>
  </Description>
  <Solutions>
    <Solution id="cmty-ssh-default-account-confluence-password-confluence" time="15m">
      <summary>Fix Default SSH account: confluence password: <![CDATA[confluence]]></summary>
      <workaround>
        <p>
          Change the password to a strong non-default value.
        </p>
      </workaround>
    </Solution>
  </Solutions>
</Vulnerability>