Apache OfBiz Default Credentials Scanner

Apache OfBiz is a comprehensive open-source enterprise resource planning (ERP) system used by businesses of all sizes to manage operations like customer relationship management (CRM), supply chain management, order processing, and accounting. It integrates various business functions into a single platform, enabling efficient data flow and process automation. Organizations deploy it to streamline workflows, reduce costs, and gain real-time insights into financial and operational performance.

The vulnerability arises when administrators fail to change the default username and password after installation. Apache OfBiz ships with well-known default credentials (e.g., admin/ofbiz) for initial setup. If left unchanged, these credentials become an easy entry point for attackers. This misconfiguration is common in environments where security hardening is overlooked or rushed.

Technically, the scanner targets the login endpoint (typically /webtools/control/login) and attempts authentication using a list of known default username and password combinations. If successful, it confirms that the default credentials are still active. The vulnerability is not a software bug but a configuration flaw that exposes the entire system to unauthorized access.

Exploitation allows an attacker to gain full administrative privileges, leading to data theft, system manipulation, and potential lateral movement within the network. An attacker could modify financial records, steal customer data, or deploy ransomware. The CVSS score of 8.8 reflects the high impact and ease of exploitation, making this a critical security risk for any organization using Apache OfBiz.