Bugtraq mailing list archives

Re: hidden admin user on every HP MSA2000 G3

From: nightfighter () anonmail de
Date: Mon, 13 Dec 2010 20:55:03 +0100

 Can anyone confirm this vulnerabilty?
I don't have a MSA for testing at the moment.

Hi,

i just found out that there is a hidden user on every HP MSA2000 G3 
SAN out there:

username: admin
password: !admin

this user doesnt show up in the user manager, and the password 
cannot be changed - looks like the perfect backdoor for everybody.

Current thread:

hidden admin user on every HP MSA2000 G3 hpdisclosure (Dec 13)
- Re: hidden admin user on every HP MSA2000 G3 nightfighter (Dec 15)
- Re: hidden admin user on every HP MSA2000 G3 Pavel Kankovsky (Dec 15)