Lucene search
HistoryMay 07, 2010 - 6:24 p.m.
CVE-2009-4843
cve-2009-4843
toutvirtual virtualiq pro
jboss console
remote attackers
arbitrary commands
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.028 Low
EPSS
Percentile
90.6%
ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.
Affected configurations
Node
toutvirtualvirtualiqMatch3.5-pro
| CPE | Name | Operator | Version |
|---|---|---|---|
| toutvirtual:virtualiq | toutvirtual virtualiq | eq | 3.5 |
Related
prion
prion
Authentication flaw
2010-05-07 18:24:00
cvelist
cvelist
CVE-2009-4843
2010-05-07 17:43:00
nvd
nvd
CVE-2009-4843
2010-05-07 18:24:15
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.028 Low
EPSS
Percentile
90.6%
Related for CVE-2009-4843