Fix Weak Password

Fix Weak Password

2020-12-24 11:26:29

Taotao

5094

Last edited by Taotao on 2020-12-24 14:19:41

Share links

Summary : ZenTao one-click installation package is offered in open source, professional and enterprise versions, and the default username and password for all sites are admin/123456.

1. Why you need to fix weak passwords
2. How to fix weak passwords
3. Steps to fix it

1. Why you need to fix weak passwords

ZenTao one-click installation package is offered in open source, professional and enterprise versions, and the default username and password for all sites are admin/123456.

If the user only installed the open source version and the passwords for pro/ent sites are not changed, it will cause a problem. One can visit pro/ent sites and log in, if someone knows the IP address. What is worse, this account is a super administrator.

Let's see this example. A user installed ZenTao via the one-click installation package, and the domain name is http://test.com. The address of the open source version is http://test.com/zentao. Others can visit http://test.com/pro to access the professional version admin(account)/123456(password).

2. How to fix weak passwords

Solution 1

Example: If you only installed the open source version, the addresses to visit pro and ent versions are http://127.0.0.1/pro and http://127.0.0.1/biz.

Solution 2 (Linux one-click installation)

If ZenTao pro/ent sites are not installed, you can delete or rename site directories and only keep the current site directory.

Example: If you only installed the open source version, you can delete or rename /opt/zbox/app/zentaopro and /opt/zbox/app/zentaoep. If you only installed the professional version, you can delete or rename /opt/zbox/app/zentao and /opt/zbox/app/zentaoep.

Solution 3 (Windows one-click installation)

Example: If you only installed the open source version, log in the database, and modify the password in zt_user in the database of the zentaopro and zentaoep(/ent). If you only use the professional version, log in the database and modify the password in the zt_user table of the zentao and zentaoep(/ent) databases.