Gentoo Linux Security Advisory GLSA 200601-15 – Andrew Christensen discovered that in older versions of Paros the database component HSQLDB is installed with an empty password for the database administrator sa. Versions less than or equal to 3.2.5 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43477/glsa-200601-15.txt
Source: https://packetstormsecurity.com/files/43477/Gentoo-Linux-Security-Advisory-200601-15.html