VYPR
← All advisories
Unrated severityNVD Advisory· Published May 7, 2010· Updated Jun 16, 2026

CVE-2009-4843

CVE-2009-4843

Description

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Toutvirtual/Virtualiq2 versions
    cpe:2.3:a:toutvirtual:virtualiq:3.5:-:pro:*:*:*:*:*+ 1 more
    • cpe:2.3:a:toutvirtual:virtualiq:3.5:-:pro:*:*:*:*:*
    • (no CPE)range: <3.5 build 8691

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.