CVE-2011-5322

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-255

Affected software

No affected versions have been published.

Timeline

Published: Aug 4, 2015
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-532310.0GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which CVE-2011-532410.0The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) share CVE-2011-53257.5Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside th CVE-2011-53267.5imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellip CVE-2011-53279.8In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at CVE-2011-53288.8The user-access-manager plugin before 1.2 for WordPress has CSRF.CVE-2011-53296.1The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562.CVE-2011-53309.8Distributed Ruby (aka DRuby) 1.8 mishandles the sending of syscalls.CVE-2011-53319.8Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.