cmty-ssh-default-account-enlighted-password-save-energy.xml

<?xml version="1.0" encoding="UTF-8"?>
<Vulnerability id="cmty-ssh-default-account-enlighted-password-save-energy" published="2016-10-04" added="2016-10-04" modified="2016-10-04" version="1.0">
  <name>Default ssh account: enlighted password "save-energy"</name>
  <severity>10</severity>
  <cvss>(AV:N/AC:L/Au:N/C:C/I:C/A:C)</cvss>
  <Tags>
    <tag>Default Account</tag>
    <tag>SSH</tag>
  </Tags>
  <AlternateIds>
  </AlternateIds>

  <Description>
    <p>The enlighted account uses a password of &quot;save-energy&quot;.  This would allow
      anyone to log into the machine via SSH and take complete
      control.</p>
  </Description>
  <Solutions>
    <Solution id="cmty-ssh-default-account-enlighted-password-save-energy" time="15m">
      <summary>Fix Default SSH account: enlighted password: <![CDATA[save-energy]]></summary>
      <workaround>
        <p>
          Change the password to a strong non-default value.
        </p>
      </workaround>
    </Solution>
  </Solutions>
</Vulnerability>