CVE-2010-4094

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default...

5.0 MediumPublic exploit

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548.

Exploit likelihood

64.5%Up 56.7 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2010-4094
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-255
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-4094
Updated: 2026-11-02

EUVDEUVD-2010-4070 No score

Record: EUVD-2010-4070
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fqc2-x4j5-637f No score

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default...

Record: GHSA-fqc2-x4j5-637f
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apache Tomcat Manager - Application Deployer (Authenticated) Code Execution (Metasploit)	2010-12-14
Metasploit	Tomcat Application Manager Login Utility
Metasploit	Apache Tomcat Manager Application Deployer Authenticated Code Execution	2009-11-09
Metasploit	Apache Tomcat Manager Authenticated Upload Code Execution	2009-11-09

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4094 is a medium vulnerability (CVSS 5.0) in Ibm Rational Quality Manager, published October 26, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 64.5%, the 99th percentile. No source names a fixed version.