CVE-2009-4189: Critical severity micro focus operations manager i vulnerability

Published Dec 3, 2009

Updated

HP Operations Manager has a default password of OvWbusr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.

Affected Software

1 affected component

HP Operations Manager

Event History

Dec 3, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4189?

CVE-2009-4189 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2009-4189?

To fix CVE-2009-4189, change the default password for the ovwebusr account and apply any relevant patches provided by HP.

What systems are affected by CVE-2009-4189?

CVE-2009-4189 affects HP Operations Manager versions that utilize the Tomcat servlet container.

What is the impact of CVE-2009-4189?

The impact of CVE-2009-4189 allows remote attackers to execute arbitrary code through unrestricted file upload attacks.

Is there a workaround for CVE-2009-4189?

Yes, a workaround involves disabling the manager role or restricting access to the /manager servlet.