Lucene search

CVE-2010-0219

🗓️ 18 Oct 2010 17:03:00Reported by certccType

cve🔗 web.nvd.nist.gov👁 158 Views🌐 WEB

CVE-2010-0219: Apache Axis2 default admin account password vulnerabilit

Reporter	Title	Published	Views	Family All 30
Saint	CA ARCserve D2D Axis2 default password	26 Jan 201100:00	–	saint
Saint	HP Universal CMDB Server Axis2 default password	22 Feb 201100:00	–	saint
Saint	CA ARCserve D2D Axis2 default password	26 Jan 201100:00	–	saint
Saint	HP Universal CMDB Server Axis2 default password	22 Feb 201100:00	–	saint
Saint	CA ARCserve D2D Axis2 default password	26 Jan 201100:00	–	saint
Saint	HP Universal CMDB Server Axis2 default password	22 Feb 201100:00	–	saint
Saint	HP Universal CMDB Server Axis2 default password	22 Feb 201100:00	–	saint
Saint	CA ARCserve D2D Axis2 default password	26 Jan 201100:00	–	saint
OpenVAS	Apache Axis2 Default Credentials (HTTP) - Active Check	18 Mar 201500:00	–	openvas
OpenVAS	Apache Axis Detection (HTTP)	6 Apr 201600:00	–	openvas

Nvd

Node

apache axis2Match1.3

apache axis2Match1.4

apache axis2Match1.4.1

apache axis2Match1.5

apache axis2Match1.5.1

apache axis2Match1.5.2

apache axis2Match1.6

AND

sap businessobjectsMatch3.2enterprise_xi

Source	Link
kb	www.kb.juniper.net/KB27373
osvdb	www.osvdb.org/70233
securitytracker	www.securitytracker.com/id
exploit-db	www.exploit-db.com/exploits/15869
vupen	www.vupen.com/english/advisories/2010/2673
securityfocus	www.securityfocus.com/archive/1/514284/100/0/threaded
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/62523
kb	www.kb.cert.org/vuls/id/989719
spl0it	www.spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
service	www.service.sap.com/sap/support/notes/1432881

Parameter	Position	Path	Description	CWE
userName	request body	/axis2/axis2-admin/login	Default password vulnerability allowing unauthorized access to the Axis2 Web Admin Module.	CWE-255
password	request body	/axis2/axis2-admin/login	Default password vulnerability allowing unauthorized access to the Axis2 Web Admin Module.	CWE-255
submit	request body	/axis2/axis2-admin/login	Default password vulnerability allowing unauthorized access to the Axis2 Web Admin Module.	CWE-255
filename	binary	/axis2/axis2-admin/upload	Vulnerability that allows file uploads, leading to remote command execution.	CWE-255

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Oct 2010 17:00Current

7.8High risk

Vulners AI Score7.8

CVSS210

EPSS0.93877

CWE-255