CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 69.5% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2009-4188
Severity
HIGH
CVSS
10
EPSS
69.49%
Original NVD Description
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098.