Back to search

Default ORACLE account RMAN available

Severity CVSS Published Added Modified
8 (AV:N/AC:L/Au:N/C:P/I:P/A:P) January 01, 1992 November 01, 2004 September 04, 2012

Description

ORACLE creates a default account with the user ID "RMAN" and password "RMAN". It is best practice to remove default accounts, if possible. For accounts required by the system, the default password should be changed. This account grants user level access to the system.

Free Nexpose Download

Discover, prioritize, and remediate security risks today!

 Download now

Solution

Secure the ORACLE account

Remove or disable the account if it is not critical for the system to function. Otherwise, the password should be changed to a non-default value.