漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2015-0165179
漏洞标题：一汽集团多系统弱口令
相关厂商：中国第一汽车集团公司
漏洞作者： 路人甲
提交时间：2015-12-28 12:34
修复时间：2016-01-28 14:10
公开时间：2016-01-28 14:10
漏洞类型：后台弱口令
危害等级：高
自评Rank：15
漏洞状态：厂商已经修复
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2015-12-28： 细节已通知厂商并且等待厂商处理中
2015-12-28： 厂商已经确认，细节仅向厂商公开
2016-01-07： 细节向核心白帽子及相关领域专家公开
2016-01-17： 细节向普通白帽子公开
2016-01-27： 细节向实习白帽子公开
2016-01-28： 厂商已经修复漏洞并主动公开，细节向公众公开
简要描述：
一汽集团多系统弱口令
详细说明：
http://maila.faw.com.cn/
密码：123456
全是123456
zr_kc 302
zr_fm 302
zzq_kcdp 302
zzq_kc 302
zz32_zzh 302
zys_xsc 302
zyb_kc 302
zxy_gh 302
zxl_xny 302
zxl_qm 302
zxa_fm 302
zwq_xny 302
zwh_zcgs 302
zty_kc 302
zs_facyj 302
zsx_qm 302
zsw_kc 302
zsb_fm 302
zqw_kc 302
zqf_fzb 302
zpx_fm 302
zhz_kc 302
zhw_kc 302
zhw_dp 302
zhug_qm 302
zuosimin_qm 302
zhuyl_clgs 302
zhulong_qm 302
zhuhl_clgs 302
zhuhj_clgs 302
zhudf_clgs 302
zhglb5_cdz 302
zhaoqq_ys 302
zhaoh_cyj 302
zuoling_cdqm 302
zhangyi_clgs 302
zhuyumei07_ccqy 302
zhongzhaoqing_fw 302
zhangyunfeng_ys 302
zhangyingxin_qm 302
2：http://mail3.jf.faw.com.cn/
密码 123456
zhangli 302
wangli 302
lijun 302
liming 302
wangjie 302
zhangqiang 302
wangbin 302
zhangli 302
liujuan 302
zhangjian 302
liudan 302
wangli 302
yangjing 302
liuying 302
zhangxin 302
yangmin 302
zhangbin 302
lilei 302
lijian 302
zhaojing 302
zhangjian 302
liuying 302
zhaowei 302
gaofeng 302
wangrui 302
chenpeng 302
chenhui 302
yangwei 302
zhaomin 302
chenbin 302
liuhao 302
wangbin 302
lijian 302
sunwei 302
zhangli 302
wangli 302
liguiying 302
lifengying 302
wangjianjun 302
wanghongmei 302
zhangxiuhua 302
wangfang 302
wangkai 302
chenying 302
chenhong 302
wanglijuan 302
3：http://fawcustoms.faw.com.cn/system/login.jsp
500人名
4：http://iecoa.faw.com.cn/
弱口令帐号：
lijing 302
wangjing 302
wangmin 302
limin 302
liuyang 302
wangyong 302
lijie 302
zhangyan 302
zhangtao 302
liujie 302
lixia 302
lili 302
wangping 302
zhangyan 302
liuyan 302
liujun 302
wanghui 302
lidan 302
zhangchao 302
lihua 302
lihui 302
zhanghui 302
wanghao 302
chenmin 302
wangping 302
wangping 302
lili 302
zhanghong 302
lixin 302
liuyan 302
zhangming 302
lihui 302
wangxue 302
zhangxu 302
wanghua 302
wangting 302
wanghong 302
wangjing 302
wanghui 302
zhanglin 302
lifei 302
wangliang 302
zhanghui 302
zhangmei 302
liuyang 302
liujun 302
zhangdan 302
lifeng 302
libing 302
wangdong 302
lijing 302
lixin 302
lijie 302
lixiang 302
wangyang 302
zhanglin 302
zhoujing 302
xujing 302
zhangjianhua 302
wangzhiqiang 302
zhanghaiyan 302
lixiaohong 302
liujianguo 302
chenliang 302
zhangli 302
lijun 302
lijuan 302
liming 302
liumin 302
wangjie 302
chenjing 302
ligang 302
lihong 302
zhangpeng 302
wangxin 302
libo 302
wangbin 302
zhangli 302
liujuan 302
chenjie 302
zhangbo 302
zhangjian 302
zhangxin 302
yangjun 302
yangmin 302
yangbo 302
lilei 302
lijian 302
zhaojing 302
zhangjian 302
wangrui 302
chenpeng 302
chenhui 302
yangwei 302
wanglong 302
zhaomin 302
chenbin 302
huangyong 302
chenjie 302
wangbin 302
lijian 302
zhangbo 302
wangxin 302
sunwei 302
zhangli 302
libo 302
liguiying 302
lifengying 302
wangjianjun 302
wanghongmei 302
wanglihua 302
zhangxiuhua 302
wangfang 302
wangkai 302
liuhui 302
wanglin 302
chenying 302
wanglin 302
liuhui 302
chenhong 302
wanglijuan 302
zhangjun 302
liuqiang 302
zhangjun 302
漏洞证明：
http://maila.faw.com.cn/
密码：123456
全是123456
zr_kc 302
zr_fm 302
zzq_kcdp 302
zzq_kc 302
zz32_zzh 302
zys_xsc 302
zyb_kc 302
zxy_gh 302
zxl_xny 302
zxl_qm 302
zxa_fm 302
zwq_xny 302
zwh_zcgs 302
zty_kc 302
zs_facyj 302
zsx_qm 302
zsw_kc 302
zsb_fm 302
zqw_kc 302
zqf_fzb 302
zpx_fm 302
zhz_kc 302
zhw_kc 302
zhw_dp 302
zhug_qm 302
zuosimin_qm 302
zhuyl_clgs 302
zhulong_qm 302
zhuhl_clgs 302
zhuhj_clgs 302
zhudf_clgs 302
zhglb5_cdz 302
zhaoqq_ys 302
zhaoh_cyj 302
zuoling_cdqm 302
zhangyi_clgs 302
zhuyumei07_ccqy 302
zhongzhaoqing_fw 302
zhangyunfeng_ys 302
zhangyingxin_qm 302
2：http://mail3.jf.faw.com.cn/
密码 123456
zhangli 302
wangli 302
lijun 302
liming 302
wangjie 302
zhangqiang 302
wangbin 302
zhangli 302
liujuan 302
zhangjian 302
liudan 302
wangli 302
yangjing 302
liuying 302
zhangxin 302
yangmin 302
zhangbin 302
lilei 302
lijian 302
zhaojing 302
zhangjian 302
liuying 302
zhaowei 302
gaofeng 302
wangrui 302
chenpeng 302
chenhui 302
yangwei 302
zhaomin 302
chenbin 302
liuhao 302
wangbin 302
lijian 302
sunwei 302
zhangli 302
wangli 302
liguiying 302
lifengying 302
wangjianjun 302
wanghongmei 302
zhangxiuhua 302
wangfang 302
wangkai 302
chenying 302
chenhong 302
wanglijuan 302
3：http://fawcustoms.faw.com.cn/system/login.jsp
500人名
4：http://iecoa.faw.com.cn/
弱口令帐号：
lijing 302
wangjing 302
wangmin 302
limin 302
liuyang 302
wangyong 302
lijie 302
zhangyan 302
zhangtao 302
liujie 302
lixia 302
lili 302
wangping 302
zhangyan 302
liuyan 302
liujun 302
wanghui 302
lidan 302
zhangchao 302
lihua 302
lihui 302
zhanghui 302
wanghao 302
chenmin 302
wangping 302
wangping 302
lili 302
zhanghong 302
lixin 302
liuyan 302
zhangming 302
lihui 302
wangxue 302
zhangxu 302
wanghua 302
wangting 302
wanghong 302
wangjing 302
wanghui 302
zhanglin 302
lifei 302
wangliang 302
zhanghui 302
zhangmei 302
liuyang 302
liujun 302
zhangdan 302
lifeng 302
libing 302
wangdong 302
lijing 302
lixin 302
lijie 302
lixiang 302
wangyang 302
zhanglin 302
zhoujing 302
xujing 302
zhangjianhua 302
wangzhiqiang 302
zhanghaiyan 302
lixiaohong 302
liujianguo 302
chenliang 302
zhangli 302
lijun 302
lijuan 302
liming 302
liumin 302
wangjie 302
chenjing 302
ligang 302
lihong 302
zhangpeng 302
wangxin 302
libo 302
wangbin 302
zhangli 302
liujuan 302
chenjie 302
zhangbo 302
zhangjian 302
zhangxin 302
yangjun 302
yangmin 302
yangbo 302
lilei 302
lijian 302
zhaojing 302
zhangjian 302
wangrui 302
chenpeng 302
chenhui 302
yangwei 302
wanglong 302
zhaomin 302
chenbin 302
huangyong 302
chenjie 302
wangbin 302
lijian 302
zhangbo 302
wangxin 302
sunwei 302
zhangli 302
libo 302
liguiying 302
lifengying 302
wangjianjun 302
wanghongmei 302
wanglihua 302
zhangxiuhua 302
wangfang 302
wangkai 302
liuhui 302
wanglin 302
chenying 302
wanglin 302
liuhui 302
chenhong 302
wanglijuan 302
zhangjun 302
liuqiang 302
zhangjun 302
修复方案：
版权声明：转载请注明来源 路人甲@乌云
漏洞回应
厂商回应：
危害等级：中
漏洞Rank：10
确认时间：2015-12-28 14:56
厂商回复：
已经提交运维部门处理
最新状态：
2016-01-28：已修复