Default Password Vulnerability in Apache Axis2 for SAP BusinessObjects and CA ARCserve

CVE-2010-0219

Summary

The Apache Axis2 framework, utilized in products such as SAP BusinessObjects Enterprise XI 3.2 and CA ARCserve D2D r15, exposes a security flaw with its admin account, which is pre-configured with the insecure default password 'axis2'. This vulnerability allows remote attackers to gain unauthorized access and potentially execute arbitrary code by uploading crafted web services, posing significant risks to the integrity and availability of the affected systems. Organizations using these products must take immediate steps to modify default credentials to safeguard against potential exploitation.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2010-0219
Created by Rapid7

References