CVE-2015-3001

Publication date

2015-06-08 14:00:00

Family

mitre

State

PUBLISHED

Description

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.