Vulnerabilities > Akkadianlabs > Provisioning Manager
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-07-22 | CVE-2021-31579 | Use of Hard-coded Credentials vulnerability in Akkadianlabs OVA Appliance and Provisioning Manager Akkadian Provisioning Manager Engine (PME) ships with a hard-coded credential, akkadianuser:haakkadianpassword. | 9.8 |
| 2021-07-22 | CVE-2021-31580 | OS Command Injection vulnerability in Akkadianlabs OVA Appliance and Provisioning Manager The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be bypassed by switching the OpenSSH channel from `shell` to `exec` and providing the ssh client a single execution parameter. | 9.8 |
| 2021-07-22 | CVE-2021-31581 | Cleartext Storage of Sensitive Information vulnerability in Akkadianlabs OVA Appliance and Provisioning Manager The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be escaped by abusing the 'Edit MySQL Configuration' command. | 4.4 |