Vulnerability · Published Jul 22, 2021 · Assigned by rapid7
CVE-2021-31579Akkadian Provisioning Manager Engine (PME) Hard-Coded Credentials
High 8.2
In plain English
A high-severity hard-coded credentials in Provisioning Manager Engine (PME) from Akkadian. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)1.3%top 29.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Akkadian Provisioning Manager Engine (PME) ships with a hard-coded credential, akkadianuser:haakkadianpassword. This issue was resolved in Akkadian OVA appliance version 3.0 (and later), Akkadian Provisioning Manager 5.0.2 (and later), and Akkadian Appliance Manager 3.3.0.314-4a349e0 (and later).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Akkadian | Provisioning Manager Engine (PME) | 4.50.18 – through 4.50.18 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N