CVE record · 1 source
CVE-2026-111257
With the default configuration and no users defined in the default user database, TomEE silently adds an administrative user with a well-known…
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-1392
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
With the default configuration and no users defined in the default user database, TomEE silently adds an administrative user with a well-known…
With the default configuration and no users defined in the default user database, TomEE silently adds an administrative user with a well-known password at startup. A remote attacker can use these credentials to authenticate to…