Description

It's possible to access the SonarQube Console by using the default credentials. The default administrative user name and password for the SonarQube Console is admin and admin respectively. You should change these default credentials.

Remediation

Change the default administrative credentials for SonarQube Console.

References

SonarQube Security

Related Vulnerabilities

Web2py weak secret key

Express express-session weak secret key

Flask weak secret key

Application is Vulnerable to the JWT Alg None Attack

Yii2 weak secret key

Severity

High

Classification

CWE-798 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Weak Credentials Default Credentials