Security Advisory
CVE-2015-3001
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.