CVE-2009-4188
HP Operations Dashboard - Unauthenticated Remote Code Execution via Default j2deployer Credentials
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2009-4188.
PoCs published by Intevydis, MC, jduck, including Metasploit module auxiliary/scanner/http/tomcat_mgr_login.
AI-analyzed exploit summary The entry describes an authentication bypass vulnerability in HP Operations Dashboard 2.1 for Windows, where default credentials (j2deployer:j2deployer) can be exploited for unauthorized access. No functional exploit code is provided, but it references readily available tools for exploitation.
Description
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098.
Exploits (5)
The entry describes an authentication bypass vulnerability in HP Operations Dashboard 2.1 for Windows, where default credentials (j2deployer:j2deployer) can be exploited for unauthorized access. No functional exploit code is provided, but it references readily available tools for exploitation.
This Metasploit module is a login utility for Tomcat Application Manager, designed to brute-force or test credentials against the manager interface. It does not exploit a vulnerability but scans for weak or default credentials.
This Metasploit module exploits Apache Tomcat's Manager application to deploy a malicious WAR archive containing a JSP payload, achieving remote code execution. It supports multiple platforms and architectures, and includes automatic target detection.
This Metasploit module exploits Apache Tomcat's manager application to upload and execute a malicious WAR archive containing a JSP payload. It handles authentication, CSRF token extraction, and payload deployment/cleanup.
This Metasploit module exploits Apache Tomcat's manager application to deploy a malicious WAR archive containing a JSP payload, achieving remote code execution. It supports multiple platforms (Java, Linux, Windows) and includes automatic target detection.