CVE-2022-2336 — Softing Secure Integration Server Improper Authentication
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows So…
Published: 2022-08-17 · CVSS: 9.8 · CVSS 3.1
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7