PT-2009-6352 · Apache+1 · Apache Tomcat+1

Published 2009-12-03 · Updated 2009-12-04 · CVE-2009-4188

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Operations Dashboard (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the "/manager" servlet in the Tomcat servlet container. This is possible due to a default password of j2deployer for the j2deployer account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4188

Affected Products

Hp Operations Dashboard

Apache Tomcat

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16317 · Exploit
• 🔥 https://exploit-db.com/exploits/33211 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4188 · Security Note
• http://securityfocus.com/bid/36258 · Note
• http://intevydis.com/blog/?p=87 · Note