PT-2009-6353 · Hewlett Packard · Hp Operations Manager

Published 2009-12-03 · Updated 2009-12-04 · CVE-2009-4189

Mitre

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4189

Affected Products

Hp Operations Manager

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16317 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4189 · Security Note
• http://intevydis.com/blog/?p=87 · Note