A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system.

A specific type of ArcGIS Enterprise deployment, is vulnerable to a Password Recovery Exploitation vulnerability in Portal, that could allow an attacker to reset the password on the built in admin account.

Уязвимость веб-портала Portal for ArcGIS, связанная с использованием жестко закодированных учетных данных, позволяющая нарушителю выполнить произвольный код