Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-0557
HistoryFeb 05, 2010 - 10:30 p.m.

CVE-2010-0557

2010-02-0522:30:02
CWE-255
mitre
web.nvd.nist.gov
57
ibm
cognos express
9.0
tomcat manager
denial of service
hardcoded credentials
cve-2010-0557

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.025

Percentile

90.3%

JSON

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.

Affected configurations

Nvd
Node
ibmcognos_expressMatch9.0
VendorProductVersionCPE
ibmcognos_express9.0cpe:2.3:a:ibm:cognos_express:9.0:*:*:*:*:*:*:*

Related

saint 4
prion 1
cvelist 1
checkpoint_advisories 1
nvd 1
nessus 1
packetstorm 1
exploitdb 2
zdt 1
metasploit 3
openvas 2
saint
saint
IBM Cognos Express Server Backdoor Account Remote Code Execution
2010-05-25 00:00:00
IBM Cognos Express Server Backdoor Account Remote Code Execution
2010-05-25 00:00:00
IBM Cognos Express Server Backdoor Account Remote Code Execution
2010-05-25 00:00:00
prion
prion
Hardcoded credentials
2010-02-05 22:30:00
cvelist
cvelist
CVE-2010-0557
2010-02-05 22:13:00
checkpoint_advisories
checkpoint_advisories
IBM Cognos Server Backdoor Account Remote Code Execution (CVE-2010-0557)
2010-05-24 00:00:00
nvd
nvd
CVE-2010-0557
2010-02-05 22:30:02
nessus
nessus
Apache Tomcat Manager Common Administrative Credentials
2008-11-26 00:00:00
packetstorm
packetstorm
Apache Tomcat Manager Code Execution
2014-02-01 00:00:00
exploitdb
exploitdb
Apache Tomcat Manager - Application Upload (Authenticated) Code Execution (Metasploit)
2014-02-05 00:00:00
Apache Tomcat Manager - Application Deployer (Authenticated) Code Execution (Metasploit)
2010-12-14 00:00:00
zdt
zdt
Apache Tomcat Manager Code Execution Exploit
2014-02-04 00:00:00
metasploit
metasploit
Apache Tomcat Manager Authenticated Upload Code Execution
2014-01-30 20:03:52
Apache Tomcat Manager Application Deployer Authenticated Code Execution
2013-01-31 05:23:41
Tomcat Application Manager Login Utility
2013-10-21 20:13:46
openvas
openvas
Apache Tomcat Manager/Host Manager/Server Status Default/Hardcoded Credentials (HTTP)
2012-08-22 00:00:00
Apache Tomcat Server Administration Default/Hardcoded Credentials (HTTP)
2015-04-10 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.025

Percentile

90.3%

JSON
Related for CVE-2010-0557
saint4prion1cvelist1checkpoint_advisories1nvd1nessus1packetstorm1exploitdb2zdt1metasploit3openvas2