Privilege escalation via default database credentials

Default credentials in Ivanti Cloud Services Appliance before 5.0.5 allow local users to gain elevated database privileges. The appliance creates a gsbuser PostgreSQL account with a shared default password and rights to read users, alter configuration, and delete table contents. Exploitation requires authenticated local access to the appliance, after which the database account permits broad compromise of CSA data and configuration.