Vulnerability Details CVE-2009-4188
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.86
EPSS Ranking 99.3%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2009-4188
-
cpe:2.3:a:hp:operations_dashboard:*