CVE Vulnerabilities

CVE-2025-55110

Use of Default Credentials

Published: Sep 16, 2025 | Modified: Sep 16, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented.

An attacker with read access to the keystore could access sensitive data using this password.

Weakness

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

Potential Mitigations

References