Lucene search

[email protected]CVE-2010-4495

HistoryDec 17, 2010 - 7:00 p.m.

CVE-2010-4495

2010-12-1719:00:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2010-4495

unspecified vulnerability

tibco activematrix

jmx connections

remote code execution

nvd

7.9 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.2%

JSON

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service 1.0.0 allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.

CPENameOperatorVersion
tibco:activematrix_bpmtibco activematrix bpmeq1.0.2
tibco:activematrix_service_gridtibco activematrix service grideq3.1.0
tibco:activematrix_service_bustibco activematrix service buseq3.0.0
tibco:activematrix_service_bustibco activematrix service buseq3.0.1
tibco:silver_cap_servicetibco silver cap serviceeq1.0.0
tibco:activematrix_service_gridtibco activematrix service grideq3.0.0
tibco:activematrix_bpmtibco activematrix bpmeq1.0.1
tibco:activematrix_businessworks_service_enginetibco activematrix businessworks service engineeq5.9.0
tibco:silver_bpm_servicetibco silver bpm serviceeq1.0.1
tibco:activematrix_service_gridtibco activematrix service grideq3.0.1

CPE	Name	Operator	Version
tibco:activematrix_bpm	tibco activematrix bpm	eq	1.0.2
tibco:activematrix_service_grid	tibco activematrix service grid	eq	3.1.0
tibco:activematrix_service_bus	tibco activematrix service bus	eq	3.0.0
tibco:activematrix_service_bus	tibco activematrix service bus	eq	3.0.1
tibco:silver_cap_service	tibco silver cap service	eq	1.0.0
tibco:activematrix_service_grid	tibco activematrix service grid	eq	3.0.0
tibco:activematrix_bpm	tibco activematrix bpm	eq	1.0.1
tibco:activematrix_businessworks_service_engine	tibco activematrix businessworks service engine	eq	5.9.0
tibco:silver_bpm_service	tibco silver bpm service	eq	1.0.1
tibco:activematrix_service_grid	tibco activematrix service grid	eq	3.0.1

References

secunia.com/advisories/42640

www.securityfocus.com/bid/45400

www.securitytracker.com/id?1024894

www.tibco.com/multimedia/activematrix_advisory_20101214_tcm8-12728.txt

www.vupen.com/english/advisories/2010/3241

7.9 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.2%

JSON

Related for CVE-2010-4495

prion1 cvelist1