10

CVE-2009-3843

EPSS 78.97%
Veröffentlicht 24.11.2009 00:30:00
Zuletzt bearbeitet 16.06.2026 23:12:27
Quelle hp-security-alert@hp.com
CVE-Watchlists
Login
Unerledigt
Login

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Operations Manager Version8.10 Editionwindows

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	78.97%	0.995

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://marc.info/?l=bugtraq&m=125873415424980&w=2

http://secunia.com/advisories/37444

Vendor Advisory

http://securitytracker.com/id?1023222

http://www.osvdb.org/60317

http://www.zerodayinitiative.com/advisories/ZDI-09-085/

https://exchange.xforce.ibmcloud.com/vulnerabilities/54361

https://nvd.nist.gov/vuln/detail/CVE-2009-3843

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-3843

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-3843

EUVD