Access Control: Default SSH Credentials¶

Identifier: ssh_default_credentials

Scanner(s) Support¶

Description¶

Check if the SSH server accepts default credentials.

SSH servers configured with default credentials are vulnerable to unauthorized access, which can lead to complete system compromise.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  ssh_default_credentials:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference¶

assets_allowed¶

Type : List[AssetType]*

List of assets that this check will cover.

skip¶

Type : boolean

Skip the test if true.