Apache Karaf Default Credentials Command Execution –
– This Metasploit module exploits a default misconfiguration flaw on Apache Karaf versions 2.x-4.x. The karaf user has a known default password, which can be used to login to the SSH service, and execute operating system commands from remote. – Read More – Packet Storm