CVE-2009-3843: hp operations_manager
Vulnerability summary
CVE-2009-3843 is a high (CVSS 10.0) vulnerability in hp operations_manager. EPSS estimates a 78.97% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 24-11-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
78.97%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 78.97% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundApache Tomcat Manager - Application Deployer (Authenticated) Code Execution (Metasploit)
Maturity: weaponized
Tomcat Application Manager Login Utility
auxiliary/scanner/http/tomcat_mgr_login
Maturity: poc
Apache Tomcat Manager Application Deployer Authenticated Code Execution
exploit/multi/http/tomcat_mgr_deploy
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Hp1 product
1 vendor · 1 product
References
6 links- www.zerodayinitiative.com/advisories/ZDI-09-085/X Refsource MISC