Re: hidden admin user on every HP MSA2000 G3

2010-12-15 Thread Pavel Kankovsky
On Mon, 13 Dec 2010 hpdisclos...@anonmail.de wrote: > i just found out that there is a hidden user on every HP MSA2000 G3 > SAN out there: > > username: admin > password: !admin Confirmed on P2000 G3 (fw L100R013). (Please, HP, is it really necessary to give us *so many* different reasons to ha

Re: hidden admin user on every HP MSA2000 G3

2010-12-15 Thread nightfighter
Can anyone confirm this vulnerabilty? I don't have a MSA for testing at the moment. > Hi, > > i just found out that there is a hidden user on every HP MSA2000 G3 > SAN out there: > > username: admin > password: !admin > > this user doesnt show up in the user manager, and the password > cannot b

hidden admin user on every HP MSA2000 G3

2010-12-13 Thread hpdisclosure
Hi, i just found out that there is a hidden user on every HP MSA2000 G3 SAN out there: username: admin password: !admin this user doesnt show up in the user manager, and the password cannot be changed - looks like the perfect backdoor for everybody.