CVE-2009-4189

6 known exploits for CVE-2009-4189

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.

Affected products: Hp Operations Manager
Hp Operations Manager: All versions

Fix: Available
CVSS 2.0: 10.0 HIGH
EPSS: 78.5% (100th percentile)
Weakness: CWE-255
NVD status: Modified
Published: 2009-12-03

CVE-2009-4189 at NVD

Authoritative description, scoring and affected products

Apache Tomcat Manager Code Execution Exploit

2014-02-04 metasploitZDTRuby

Apache Tomcat Manager Code Execution

2014-02-01 rangerchaPACKETSTORMRuby

Apache Tomcat Manager Authenticated Upload Code Execution

2014-01-30 rangerchaMETASPLOITRuby

Tomcat Application Manager Login Utility

2013-10-21 MC <mc@metasploit.com>, Matteo Cantoni <goony@nothink.org>, jduck <jduck@metasploit.com>METASPLOITRuby

Apache Tomcat Manager Application Deployer Authenticated Code Execution

2013-01-31 jduck <jduck@metasploit.com>METASPLOITRuby

Apache Tomcat Manager - Application Deployer (Authenticated) Code Execution (Metasploit)

2010-12-14 MetasploitEXPLOITDBRuby