Hidden admin user on every HP MSA2000 G3

Re:Hidden admin user on every HP MSA2000 G3 by patrickgzill on Tuesday December 14, 2010 @09:37AM (#2004256)

Pretty serious, considering that these devices can do iSCSI - meaning any machine with access to it over the LAN, such as any machine that is getting some iSCSI storage from the device, can now do nefarious things.

[ Parent | on HN ]

Re:Hidden admin user on every HP MSA2000 G3 by zsouthboy on Tuesday December 14, 2010 @09:59AM (#2004349)

I don't know about others, but we put all our iSCSI stuff on a physically disparate network, separate NICs, separate switches.

Doesn't help if someone has physical access to the datacenter, but that's a given.

[ Parent | on HN ]

Re:Hidden admin user on every HP MSA2000 G3 by patrickgzill on Tuesday December 14, 2010 @11:26AM (#2004635)

Would it not be the case, that a compromised machine that was mounting iSCSI, might then be able to access the hidden admin feature? It could then mount other volumes read-only and read data meant to be private...

[ Parent | on HN ]

Re:Hidden admin user on every HP MSA2000 G3 by thehigherlife on Tuesday December 14, 2010 @02:57PM (#2005503)

Not necessarily. In most cases administration access to these things are on an entirely separate network from connection protocol. Having an iSCSI / nfs connection isn't enough; you'd also have to be on the same network as the management interface.

[ Parent | on HN ]