A security issue and some vulnerabilities have been reported in ToutVirtual VirtualIQ Pro, which can be exploited by malicious people to disclose potentially sensitive information or compromise a vulnerable system.

1) Some vulnerabilities in Tomcat can be exploited by malicious people to disclose sensitive information.

For more information see vulnerability #3 in:
SA31379

2) A security issue exists due to access to the JMX Console and Web Console in the included JBoss web application server is not properly restricted. This can be exploited to e.g. execute arbitrary shell commands.

The security issue and the vulnerabilities are reported in version 3.2 build 7882. Other versions may also be affected.

Solution
Update to version 3.5 build 8691.

Provided and/or discovered by
Alberto Trivero and Claudio Criscione, Secure Network S.r.l.

Changelog
Further details available in Customer Area

Original Advisory
http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area