CVE-2009-4844
ToutVirtual VirtualIQ Pro 3.2 build 7882 - Unauthenticated Sensitive Information Exposure via Tomcat Status Endpoint
Title source: llmDescription
ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct request.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_misc
http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58576
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507729/100/0/threaded
Scores
EPSS
0.0120
EPSS Percentile
64.7%
Details
CWE
CWE-200
Status
published
Products (1)
toutvirtual/virtualiq
3.2_build_7882
Published
May 07, 2010
Tracked Since
Feb 18, 2026