Vulnerability in HP Operations Manager
CVE-2009-3843
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.
EPSS: 0.790 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Hp Operations_manager — versions 8.10
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (x_refsource_MISC)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2009-3843?
- CVE-2009-3843 is a vulnerability in HP Operations Manager, classified under CWE-264. Published 2009-11-24.
- Is CVE-2009-3843 known to be exploited?
- 16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.