CVE-2009-4843 | BDVDB-2026-41598 Detail

Description#

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/37297
http://www.securityfocus.com/archive/1/507729/100/0/threaded
http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt

Exploit#

No public exploit known

History#

Version 12010-05-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.