Description

It's possible to access the Apache Geronimo Administration Console by using the default credentials. The default administration user name and password for the Geronimo Administration Console and command line deployment tool is system and manager respectively. You should change these defaults directly from the Geronimo Administration Console by accessing Security -> Console Realm and change the user name and password from the Console Realm Users portlet.

Remediation

Change the default administrative username and password from Geronimo Administration Console by accessing Security -> Console Realm.

References

Related Vulnerabilities