full-disclosure - Inquira: Multiple Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <fe37588d0903200134r9093322i201504a501c7afb0@mail.gmail.com>
Date: Fri, 20 Mar 2009 01:34:28 -0700
From: Kristian Erik Hermansen <kristian.hermansen@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Inquira: Multiple Vulnerabilities

Bonjour,

During a recent penetration test, we discovered and worked with
Inquira to close numerous web-based issues.  The vendor has not
replied back about a formal release of these issues, so I am posting
this notice here to inform customers to check for an update for their
products.  You can contact Inquira via the link below.

http://www.inquira.com/

Additionally, it is also advised that customers change the default
passwords used by the affected software.  For instance, the default
Apache Tomcat administrator account details are listed below and
should probably be added to publicly listed default password databases
(phenoelit, etc).

Vendor: Inquira
Products: (multiple)
Username: inquira
Password: inquira123

Cheers,
-- 
Kristian Erik Hermansen
http://www.linkedin.com/in/kristianerikhermansen

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/