Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-4188
HistoryDec 03, 2009 - 5:30 p.m.

CVE-2009-4188

2009-12-0317:30:02
CWE-255
[email protected]
web.nvd.nist.gov
5

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.777

Percentile

98.3%

JSON

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098.

Affected configurations

Nvd
Node
hpoperations_dashboard
VendorProductVersionCPE
hpoperations_dashboard*cpe:2.3:a:hp:operations_dashboard:*:*:*:*:*:*:*:*

Related

prion 2
cvelist 2
cve 2
nvd 1
exploitdb 3
zdt 1
packetstorm 1
metasploit 3
openvas 2
prion
prion
Unrestricted file upload
2009-12-03 17:30:00
Code injection
2009-09-08 18:30:00
cvelist
cvelist
CVE-2009-4188
2009-12-03 17:00:00
CVE-2009-3098
2009-09-08 18:00:00
cve
cve
CVE-2009-4188
2009-12-03 17:30:02
CVE-2009-3098
2009-09-08 18:30:00
nvd
nvd
CVE-2009-3098
2009-09-08 18:30:00
exploitdb
exploitdb
HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security
2009-09-03 00:00:00
Apache Tomcat Manager - Application Upload (Authenticated) Code Execution (Metasploit)
2014-02-05 00:00:00
Apache Tomcat Manager - Application Deployer (Authenticated) Code Execution (Metasploit)
2010-12-14 00:00:00
zdt
zdt
Apache Tomcat Manager Code Execution Exploit
2014-02-04 00:00:00
packetstorm
packetstorm
Apache Tomcat Manager Code Execution
2014-02-01 00:00:00
metasploit
metasploit
Apache Tomcat Manager Authenticated Upload Code Execution
2014-01-30 20:03:52
Apache Tomcat Manager Application Deployer Authenticated Code Execution
2013-01-31 05:23:41
Tomcat Application Manager Login Utility
2013-10-21 20:13:46
openvas
openvas
Apache Tomcat Manager/Host Manager/Server Status Default/Hardcoded Credentials (HTTP)
2012-08-22 00:00:00
Apache Tomcat Server Administration Default/Hardcoded Credentials (HTTP)
2015-04-10 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.777

Percentile

98.3%

JSON
Related for NVD:CVE-2009-4188
prion2cvelist2cve2nvd1exploitdb3zdt1packetstorm1metasploit3openvas2