CVE-2009-3548
N/A
Published: November 12, 2009 at 11:00 PM UTC
Updated: June 16, 2026 at 11:11 PM UTC
1 product affected across 1 vendorTomcat
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 79%
Description
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.03.13.1.13.23.2.13.2.23.2.2 beta23.2.33.2.43.33.3.13.3.1a3.3.24.0.04.0.14.0.24.0.34.0.44.0.54.0.64.1.04.1.14.1.104.1.114.1.124.1.134.1.144.1.154.1.164.1.174.1.184.1.194.1.24.1.204.1.214.1.224.1.234.1.244.1.254.1.264.1.274.1.284.1.294.1.34.1.3 beta4.1.304.1.314.1.324.1.334.1.344.1.354.1.364.1.374.1.384.1.394.1.44.1.54.1.64.1.74.1.84.1.94.1.9 beta5.0.05.0.15.0.105.0.115.0.125.0.135.0.145.0.155.0.165.0.175.0.185.0.195.0.25.0.215.0.225.0.235.0.245.0.255.0.265.0.275.0.285.0.295.0.35.0.305.0.45.0.55.0.65.0.75.0.85.0.95.5.05.5.15.5.105.5.115.5.125.5.135.5.145.5.155.5.165.5.175.5.185.5.195.5.25.5.205.5.215.5.225.5.235.5.245.5.255.5.265.5.275.5.285.5.35.5.45.5.55.5.65.5.75.5.85.5.96.06.0.06.0.16.0.106.0.116.0.126.0.136.0.146.0.156.0.166.0.176.0.186.0.26.0.206.0.36.0.46.0.56.0.66.0.76.0.86.0.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (26)
Vendor Advisoryx_refsource_HP
Source: [email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=127420533226623&w=2Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=133469267822771&w=2Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=136485229118404&w=2Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=139344343412337&w=2Quick Info
StatusMODIFIED
CWE
CWE-255
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card