# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# CherryBlossom -- Installation Guide

19 July, 2012

- 1
- 2
…
- 6
- 7
- 8
- 9
- 10
…
- 20
- 21

SECRET//20350112
5.3 (U) CB Server Users and Passwords
(S) The following table lists the critical users/passwords for CB servers:
Server/Service User Password
CB Server Linux root
account
root k3dEtE820s (although
see note below)
CB Server Linux cbuser
account
cbuser cbPhoneHome
CB Server Mysql root
account
root key4CherryTree
CB Server Mysql cbuser
account
cbuser key4CherryTree
CB VPN Server Linux root
account
root k3dEtE820s (although
see note below)
Cherry Web Admin User cwadmin k3dEtE820sFqw3
Cherry Web Admin User sponsor k3dEtE820sFqw3
Cherry Web Normal User cbuser k3dEtE820sFqw3
(S) NOTE: the sponsor maintains CB servers, and may change the Linux root account
password. As such, the sponsor tracks the root password. Contact the appropriate sponsor
personnel for changed root passwords.
5.4 (U) CB Server “root” Console/Terminal Access
(S) “root” console/terminal access to CB Servers is gained through the Icon (formerly
Genesis) system. This section assumes the user has successfully logged on to an Icon
terminal and, using the Cisco VPN Client software, connected to the
“TDN-VPN-ASA01” profile.
(U) Once logged on and connected to the proper profile, start the PuTTY program. On
the PuTTY GUI, enter the IP address of the CB Server of interest (IP addresses are found
in the Network Diagram of section 5.1). When prompted for credentials, use:
user = root
password = the “CB Server Linux root account” password from section 5.3.
5.5 (U) CB Server “cubser” Console/Terminal Access
(U) Some actions performed on a CB Server do not require root access. In general, if an
action does not require root access, that action should be done as user “cbuser”.
(U) To gain “cbuser” console/terminal access to a CB Server, follow the instructions for
opening a “root” console/terminal of section 5.4, using the following for credentials:
user = cbuser
password = the “CB Server Linux cbuser account” password from section 5.3.
SECRET//20350112
8

- 1
- 2
…
- 6
- 7
- 8
- 9
- 10
…
- 20
- 21