HP Operations Manager Apache Tomcat Default Ovwebusr Password Vulnerability
Data de publicação: 21 julho 2015
Schweregrad: : Crítico
Data do informe: 21 julho 2015
Descrição
HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container.
Exposição das informações
Apply associated Trend Micro DPI Rules.
Solução
Trend Micro Deep Security DPI Rule Number: 1003854