Summary
Orion Application Server is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles.
Attackers can exploit this issue to execute arbitrary commands in a terminal.
Orion Application Server 2.0.7 is vulnerable
other versions may also
be affected.
References
Severity
Classification
-
CVE CVE-2009-4493 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Apache Tomcat Request Object Security Bypass Vulnerability (Win)
- httpdx Space Character Remote File Disclosure Vulnerability
- Apache Tomcat Multiple Security Bypass Vulnerabilities (Win)
- Apache Tomcat Denial Of Service Vulnerability (Windows)
- IBM Rational Quality Manager and Rational Test Lab Manager Tomcat Default Account Vulnerability