File Upload Vulnerability in HP Operations Manager on Windows
CVE-2009-3843

Currently unrated

Key Information:

Vendor

HP
Status
Operations Manager
Vendor
CVE Published:
24 November 2009

What is CVE-2009-3843?

HP Operations Manager 8.10 for Windows is susceptible to a file upload vulnerability due to the presence of a 'hidden account' in the XML file that configures Tomcat users. This flaw enables remote attackers to exploit the org.apache.catalina.manager.HTMLManagerServlet class for unrestricted file upload attacks, potentially leading to the execution of arbitrary code on the affected server.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://marc.info/?l=bugtraq&m=125873415424980&w=2
vendor-advisoryx_refsource_HP
http://www.zerodayinitiative.com/advisories/ZDI-09-085/
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/54361
vdb-entryx_refsource_XF

EPSS Score

86% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.