Unrated severityNVD Advisory· Published May 7, 2010· Updated Apr 29, 2026
CVE-2009-4843
CVE-2009-4843
Description
ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.
Affected products
1- cpe:2.3:a:toutvirtual:virtualiq:3.5:-:pro:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.