CVE-2015-3001

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

Date published : 2015-06-08

http://www.securityfocus.com/bid/75035

http://www.securityfocus.com/archive/1/535679/100/0/threaded