CVE-2010-3491

Currently unrated

Key Information:

Vendor
Tibco
Status
Activematrix Service Performance Manager
Activematrix Service Bus
Activematrix Businessworks Service Engine
Activematrix Service Grid
Vendor
CVE Published:
26 October 2010

Summary

The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.

References

http://www.securityfocus.com/bid/44254
vdb-entryx_refsource_BID
http://secunia.com/advisories/41891
third-party-advisoryx_refsource_SECUNIA
http://www.tibco.com/services/support/advisories/activema...
x_refsource_CONFIRM

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.