Unscored severity · published Nov 24, 2009
CVE-2009-3843
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload…
–
CVSS
79%
EPSS
No
On KEV
Description
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.
Exploitation
Is it being used?
Exploit prediction (EPSS)79.0% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OM
Operations Manager · HP
8.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3843
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3843
marc.info
http://marc.info/?l=bugtraq&m=125873415424980&w=2
Vendor Advisory
http://secunia.com/advisories/37444
securitytracker.com
http://securitytracker.com/id?1023222
www.osvdb.org
http://www.osvdb.org/60317
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-09-085/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/54361
More from Operations Manager
10.0
CVE-2016-1985
HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections…
9.8
CVE-2016-4373
The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object,…
5.4
CVE-2016-4380
Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML…
–
CVE-2014-2649
Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors
–
CVE-2014-2648
Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors