Local Privilege Escalation Vulnerability in TIBCO Runtime Agent and ActiveMatrix BusinessWorks

CVE-2010-0184

Summary

The components of TIBCO Domain Utility in TIBCO Runtime Agent, specifically domainutility and domainutilitycmd, have been identified to set weak permissions on domain properties files. This improper configuration can allow local users to gain unauthorized access to domain administrator credentials. As a result, these users could potentially escalate their privileges across all domain systems through various unidentified vectors, posing a significant security risk.

References