• Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
Assigning CNA
Date Entry Created
20000919 Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Modified (20010116-01)
Votes (Legacy)
ACCEPT(2) Baker, Levy
MODIFY(1) Frech
NOOP(3) Christey, Cole, Wall
Comments (Legacy)
 Christey> XF:tumbleweed-mms-blank-password
 Frech> XF:umbleweed-mms-blank-password(5072)

Proposed (Legacy)
This is an entry on the CVE list, which standardizes names for security problems.