ExaGrid Known SSH Key / Default Password
Posted by deepcore on April 9, 2016 – 10:17 am
ExaGrid ships a public/private key pair on their backup appliances to allow passwordless authentication to other ExaGrid appliances. Since the private key is easily retrievable, an attacker can use it to gain unauthorized remote access as root. Additionally, this module will attempt to use the default password for root, ‘inflection’.
Post a reply
You must be logged in to post a comment.