CVE-2018-20402

Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account

published December 23, 2018

CVSS
—
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the default privilege roles that were also created for each of the accounts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01035 · 63.3th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account
    cvelistv5