Code Execution Vulnerability in TIBCO ActiveMatrix Products
CVE-2010-3491

Currently unrated

Key Information:

Vendor
Tibco
Status
Activematrix Service Performance Manager
Activematrix Service Bus
Activematrix Businessworks Service Engine
Activematrix Service Grid
Vendor
CVE Published:
26 October 2010

Summary

Certain components of TIBCO ActiveMatrix, including ActiveMatrix Runtime, Administrator, Service Bus, BusinessWorks Service Engine, and Service Performance Manager, are susceptible to vulnerabilities due to improper handling of JMX connections. This security flaw could enable remote attackers to execute arbitrary code, access sensitive information, or potentially trigger denial of service attacks through various vectors.

References

http://www.securityfocus.com/bid/44254
vdb-entryx_refsource_BID
http://secunia.com/advisories/41891
third-party-advisoryx_refsource_SECUNIA
http://www.tibco.com/services/support/advisories/activema...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.