11/28/2023
Discovery Process
During a security assessment of the BAS portal, I discovered a significant vulnerability in the administrative interface. The portal, accessible at http://bas.iitgn.ac.in:81, was found to be using default credentials, potentially allowing unauthorized access within the IITGN-SSO network.
How did I find it.
-
Port Scanning
- Target: BAS portal (IP: 10.0.137.172)
- Discovery: Open service on port 81
81/tcp open hosts2-ns -
Access Verification
- Located admin login portal for Smart Office
- Google search for the default credentials for Smart Office suite.
It turn out to be :
- Username: “smart”
- Password: “smart”
After discovering this security issue, I reported it to the appropriate authorities and monitored the remediation process.
The security team took prompt action and removed the service on port 81. Hence solve the issue.
Below is a screenshot of the interface that was accessible:
Happy Hacking!
