ID CVE-2010-0557
Summary IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:cognos_express:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:cognos_express:9.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 08-02-2010 - 05:00)
Impact:
Exploitability:
CWE CWE-255
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 38084
confirm http://www-01.ibm.com/support/docview.wss?uid=swg21419179
osvdb 62118
secunia 38457
vupen ADV-2010-0297
saint via4
bid 38084
description IBM Cognos Express Server Backdoor Account Remote Code Execution
id misc_ibmcognosacco
osvdb 62118
title ibm_cognos_express_backdoor_account
type remote
Last major update 08-02-2010 - 05:00
Published 05-02-2010 - 22:30
Last modified 08-02-2010 - 05:00
Back to Top