« Volver al listado

CVE-2010-4094

Estado: ModificadaMedia (5)—

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Rational Quality ManagerIBM — Rational Test LAB Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4094",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-10-26T18:00:01.847",
  "references": [
    {
      "url": "http://download4.boulder.ibm.com/sar/CMA/RAA/013m6/0/UpdateLog.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/69008",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/41784",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1024601",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/44172",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/2732",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-214/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://download4.boulder.ibm.com/sar/CMA/RAA/013m6/0/UpdateLog.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/69008",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/41784",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1024601",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/44172",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/2732",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-214/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role.  NOTE: this might overlap CVE-2009-3548."
    },
    {
      "lang": "es",
      "value": "El servidor Tomcat en IBM Rational Quality Manager y Rational Test Lab Manager tiene clave por defecto para una cuenta ADMIN, lo que hace fácilmente para atacantes remotos ejecutar código de su elección abrevechando el acceso al rol de administración. NOTA: esto puede superponerse con CVE-2009-3548.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:24:08.663",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC62C480-AC74-48D9-A150-01F38D2415E1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_test_lab_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "514BD9E3-0D19-4598-A025-9EBE1E4AB3EB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}