Secunia

A vulnerability has been identified in bj Http Web Server allowing malicious, local users to see the administrative username and password.

The problem is that the username and password for the bj Http Web Server is stored in clear text in "config/users.properties".

By default the username and password is "admin" and "admin".

Solution
Do not allow untrusted users access to the system running bj Http Web Server and remember to change the password.

Provided and/or discovered by
cyber_talon

Deep Links
Links available in Customer Area