_stats path access in chef server 12


#1

Hello Guys,

i'm not sure if this is the place to ask this question, I'm new to chef server. I successfully did setup of chef server (https://downloads.chef.io/chef-server) on my machine. By doing small enumeration (release update) i came to know about the path _stats. https://path_to_localhost/_stats.

If i try to access that URL, it asks for username and password but i remember through out the installation process, it never asked me to set password for any kind of user.

I believed there might be some default credentials for that, those are storing in stats_htpasswd file but password looks encrypted.

Can anyone know anything about this?

Thanks in advance.

Rayn