redmine

Redmine - Default Admin Credentials

Detected Redmine project management application was found to have been using the default administrator credentials (admin:admin). An attacker could have gained full administrative access to manage projects, users, and system settings.

Redmine Issues - Exposure

Redmine instance exposed issues via the REST API without authentication. This could have leaked sensitive project information, issue details, and user data.

Redmine Configuration File - Detect

Redmine configuration file was detected.

Redmine settings.yml File Disclosure

CVE-2011-4929

Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.