CVE-2010-0557

IBM Cognos Express 9.0 - Unauthenticated Denial of Service via Hardcoded Credentials

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2010-0557. PoCs published by MC, jduck, including Metasploit module auxiliary/scanner/http/tomcat_mgr_login.

AI-analyzed exploit summary This Metasploit module attempts to brute-force login credentials for the Tomcat Application Manager by testing default or provided usernames and passwords. It checks for HTTP 401 responses and validates successful logins.

Description

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.

Exploits (4)

metasploit SCANNER
by MC · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb

This Metasploit module attempts to brute-force login credentials for the Tomcat Application Manager by testing default or provided usernames and passwords. It checks for HTTP 401 responses and validates successful logins.

Classification
Scanner 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Apache Tomcat (multiple versions)
Auth required
Prerequisites: Access to Tomcat Manager interface · Valid or default credentials
devstral-2 · analyzed Jun 05, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb

This Metasploit module exploits Apache Tomcat's Manager application to upload and execute a malicious WAR archive, leveraging authenticated access to achieve remote code execution. It handles CSRF tokens, session management, and payload deployment/cleanup.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apache Tomcat (with exposed Manager application)
Auth required
Prerequisites: Valid credentials for Tomcat Manager · Exposed /manager/html/upload endpoint
devstral-2 · analyzed Apr 24, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
by jduck · rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb

This Metasploit module exploits Apache Tomcat's Manager application to deploy a malicious WAR archive containing a JSP payload, achieving authenticated remote code execution. It supports multiple platforms (Java, Windows, Linux) and includes functionality for automatic target detection and cleanup.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apache Tomcat (with exposed Manager application)
Auth required
Prerequisites: Valid credentials for Tomcat Manager · Exposed Manager application (/manager)
devstral-2 · analyzed Apr 24, 2026 Full analysis →
exploitdb WORKING POC
rubyremotemultiple
https://www.exploit-db.com/exploits/16317

This Metasploit module exploits Apache Tomcat's Manager application to deploy a malicious WAR archive containing a JSP payload, achieving authenticated remote code execution. It supports automatic target detection and payload generation for multiple platforms.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apache Tomcat (with exposed Manager application)
Auth required
Prerequisites: Valid credentials for Tomcat Manager · Exposed Manager application (/manager)
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/62118
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21419179
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0297
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38457
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38084

Scores

EPSS 0.7940
EPSS Percentile 99.1%

Details

CWE
CWE-255
Status published
Products (1)
ibm/cognos_express 9.0
Published Feb 05, 2010
Tracked Since Feb 18, 2026