CVE-2010-4094 The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by le...
MediumCVSS 5.0
EPSS 64.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm rational quality manager | All versions | No fix listed |
| ibm rational test lab manager | All versions | No fix listed |
References
- download4.boulder.ibm.com
- 69008 vdb-entry
- 41784 third-party-advisory
- 1024601 vdb-entry
- 44172 vdb-entry
- ADV-2010-2732 vdb-entry vendor-advisory
- www.zerodayinitiative.com