Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3491

The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.

Published

2010-10-26T19:00:02.987

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	tibco	activematrix_businessworks_service_engine	≤ 5.8.0	Yes
Application	tibco	activematrix_service_bus	≤ 2.3.0	Yes
Application	tibco	activematrix_service_grid	≤ 2.3.0	Yes
Application	tibco	activematrix_service_performance_manager	≤ 1.3.1	Yes

References

http://secunia.com/advisories/41891 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/44254 ([email protected])
http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt Vendor Advisory ([email protected])
http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp Patch, Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/2747 Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/62674 ([email protected])
http://secunia.com/advisories/41891 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/44254 (af854a3a-2127-422b-91ae-364da2661108)
http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/2747 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/62674 (af854a3a-2127-422b-91ae-364da2661108)