Encrypted Tunnels Using SSH and MindTerm 5. This product contains a number of vulnerabilities that causes the product to be insecure for use on the Internet. WebTrends Enterprise Reporting Server logs debug information in a world readable and writable file. The debug information may include usernames and passwords stored in clear text. It is also possible for local users to gain unauthorized access to the server as well as to WebTrends administration software.
Local users can also modify that file, making the auditing mechanism unsafe.
On WebTrends Enterprise Reporting Server, the default installation has blank administrator password. A remote user may be able to gain administrative privileges to the WebTrends administration software. Security Ltd. All rights reserved. Terms of Use Site Privacy Statement .