| Package | Affected versions | Patched versions |
|---|---|---|
| site server | = 3.0 | |
| site server commerce | = 3.0 |
Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free