OpenAtlas Hardcoded Administrator Password Vulnerability

A vulnerability exists in OpenAtlas version 8.11.0, where the default installation creates an administrator account with a hardcoded password. This password allows full administrative access to the application. The vulnerability arises because the default password is widely known and remains active unless changed manually.

Impact

Exploitation of this vulnerability allows unauthorized users to gain administrative privileges, enabling them to take full control of the application.

Remediation

Users are advised to update to OpenAtlas version 8.12.0. As a temporary measure, the administrator password should be changed.