CVE-2009-3843

EPSS 86.83%
Published 24.11.2009 00:30:00
Last modified 09.04.2025 00:30:58
Source hp-security-alert@hp.com
Teams watchlist Login
Open Login

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Operations Manager Version8.10 Editionwindows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	86.83%	0.994

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://marc.info/?l=bugtraq&m=125873415424980&w=2

http://secunia.com/advisories/37444

Vendor Advisory

http://securitytracker.com/id?1023222

http://www.osvdb.org/60317

http://www.zerodayinitiative.com/advisories/ZDI-09-085/

https://exchange.xforce.ibmcloud.com/vulnerabilities/54361

https://nvd.nist.gov/vuln/detail/CVE-2009-3843

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-3843

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-3843

EUVD