Need some advice - strange things going on here..
- I tried loggin in to a reseller clients whm account with his domain and - what I supposed were his username seka (not the real username off course) - it turned out that seka only was his username at the help desk - the username for his reseller account is ttseka (neither the real username used here off course). So this is what I did:
https://hisdomain.com:2087 - logged in using his help desk username: seka and the servers root password and up shows the root WHM in the browser. What is going on here? - I checked the server/root WHM and there is no user with the username seka on this server - only his real account which has the username ttseka.
Can anyone here explain to me how I can load the root WHM for an account that neither has ssh access or root access? - and using a non-existing username
- is there a security risk here?Thanks
John
