[Security] root password not changed when changing the password

[manudie]

Hi, I just started using the VM image of LoxBerry. I changed the password as recommended by the installation in the web interface and I set a pin, but I tried directly to ssh root@loxberry_ip_address and I could login with the default "loxberry" password.
I assume that most of the users don't try to do this so they don't realise that there is a back door to the VM until they do that.
ssh as root should be disabled or the password of root changed.

[Christian Fenzl]

Hi manudie,

I suggest to post in the LoxBerry section, and you need to clarify what VM you’ve used (from what creator), as there are several VMs.

[Prof.Mobilux]

This is a problem of the VM. All VMs are not official, so please contact the author of the VM or post here details which VM you used. Maybe the author is active here in the forum.