Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9cw6-3jhc-97m4

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

EPSS

Процентиль: 83%
0.01837
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
почти 16 лет назад

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

EPSS

Процентиль: 83%
0.01837
Низкий

Дефекты

CWE-287