| Package | Affected versions | Patched versions |
|---|---|---|
| virtualiq | = 3.5 |
ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free