NetSight
IP …
critical10.0Public exploit code

CVE-2010-0219

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for t…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.

Affected products

VendorProductAffected versions
ApacheAxis2
Versions 1.3, 1.4, 1.4.1, 1.5, 1.5.1, 1.5.2
SapBusinessobjects
Version 3.2

Weakness classification

CWE-255

References