Sensitive Data: Apache HertzBeat - Default Credentials¶

Identifier: apache_hertzbeat_default_login

Scanner Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner	ASM Scanner	Automated Pentest

Description¶

Apache HertzBeat monitoring platform may be accessible with default admin credentials, allowing unauthorized access to monitoring configurations, metrics, and administrative functions.

How we test: We attempt to authenticate to the Apache HertzBeat interface using common default username and password combinations. If authentication succeeds, we report the vulnerability.

Reference:

https://github.com/apache/hertzbeat

Configuration¶

Example¶

Example configuration:

---
security_tests:
  apache_hertzbeat_default_login:
    skip: false

Reference¶

`skip`¶

Type: boolean

Skip the test if true.