CVE-2010-4094 describes a critical vulnerability in IBM Rational Quality Manager and Rational Test Lab Manager, where the embedded Tomcat server utilizes a default password for the ADMIN account. This flaw allows unauthenticated remote attackers to gain manager role access, potentially leading to arbitrary code execution. Despite its age, the vulnerability has a high EPSS score and FAUCET Risk Score, indicating a significant threat. Multiple Metasploit modules and an ExploitDB entry exist, demonstrating readily available exploit code, though there is no evidence of active exploitation or community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:ibm:rational_test_lab_manager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.