CVE-2010-4094
IBM Rational Quality Manager and Rational Test Lab Manager - Remote Code Execution via Default Tomcat ADMIN Password
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2010-4094.
PoCs published by Metasploit, MC, jduck, including Metasploit module auxiliary/scanner/http/tomcat_mgr_login.
AI-analyzed exploit summary This Metasploit module exploits Apache Tomcat's Manager Application Deployer to achieve authenticated remote code execution by uploading a malicious WAR file containing a JSP payload. It supports automatic target detection and cleanup after execution.
Description
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548.
Exploits (4)
This Metasploit module exploits Apache Tomcat's Manager Application Deployer to achieve authenticated remote code execution by uploading a malicious WAR file containing a JSP payload. It supports automatic target detection and cleanup after execution.
This Metasploit module attempts to brute-force login credentials for the Tomcat Application Manager by testing various default or weak credentials. It does not exploit a specific vulnerability but checks for weak authentication configurations.
This Metasploit module exploits Apache Tomcat's Manager application to upload and execute a malicious WAR archive containing a JSP payload. It authenticates with provided credentials, bypasses CSRF protection, and achieves remote code execution by deploying the payload.
This Metasploit module exploits Apache Tomcat's Manager application to deploy a malicious WAR file containing a JSP payload, achieving remote code execution. It supports multiple platforms (Java, Windows, Linux) and includes functionality for automatic target detection and cleanup.