Apache Tomcat Application Manager Default Ovwebusr Password Vulnerability
Publish date: 29 de septiembre de 2016
Gravedad: Cr¨ªtico
Identificadores de CVE : CVE-2009-4189,CVE-2009-4189
Descripci¨®n
HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container.
Revelaci¨®n de la informaci¨®n
Apply associated live casino online DPI Rules.
Soluciones
live casino online Deep Security DPI Rule Number: 1003854
live casino online Deep Security DPI Rule Name: 1003854 - Identified Login Attempt To Apache Tomcat Manager Using Default Credentials
Software y versi¨®n afectados
- hp operations_manager