Description
Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Sitecore Experience Manager
Default version status: unaffected
10.4 to < 10.4.1 rev. 011941 PREaffected10.3 to < 10.3.3 rev. 011967 PREaffected10.2 to < 10.3affected10.1 to < 10.1.4 rev. 011974 PREaffected
Sitecore Experience Platform
Default version status: unaffected
10.4 to < 10.4.1 rev. 011941 PREaffected10.3 to < 10.3.3 rev. 011967 PREaffected10.2 to < 10.3affected10.1 to < 10.1.4 rev. 011974 PREaffected