VULNERABILITY INTELLIGENCE

CVE-2009-4843

CVSS score7.5 HIGH
EPSS probability2.11%
CISA KEVNot currently listed
Published2010-05-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

Weakness classification

  • CWE-287: Improper Authentication

Primary references