Description
OpenSearch Dashboard为存在默认口令，攻击者可以登录系统访问后台获取敏感信息。
OpenSearch Dashboard为存在默认口令
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://forum.opensearch.org/t/what-are-the-correct-default-username-and-password-for-opensearch-dashboards/8970
https://docs.escape.tech/documentation/reference/vulnerabilities/opensearch_dashboard_default_login/
https://opensearch.org/blog/replacing-default-admin-credentials/
https://github.com/opensearch-project/security/issues/4068
https://opster.com/guides/opensearch/opensearch-security/opensearch-default-username-and-password/
https://docs.opensearch.org/latest/security/getting-started/
https://juejin.cn/post/7330851925057470504