PT-2010-5504 · Tibco · Tibco Activematrix Service Grid+4

Published 2010-12-17 · Updated 2010-12-20 · CVE-2010-4495

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Service Grid versions 3.0.0 through 3.1.0 TIBCO ActiveMatrix Service Bus versions 3.0.0 through 3.0.1 TIBCO ActiveMatrix BusinessWorks Service Engine version 5.9.0 TIBCO ActiveMatrix BPM versions 1.0.1 through 1.0.2 TIBCO Silver BPM Service version 1.0.1 TIBCO Silver CAP Service version 1.0.0

Description The issue allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.

Recommendations For TIBCO ActiveMatrix Service Grid versions 3.0.0 through 3.1.0, update to a version that addresses the issue. For TIBCO ActiveMatrix Service Bus versions 3.0.0 through 3.0.1, update to a version that addresses the issue. For TIBCO ActiveMatrix BusinessWorks Service Engine version 5.9.0, update to a version that addresses the issue. For TIBCO ActiveMatrix BPM versions 1.0.1 through 1.0.2, update to a version that addresses the issue. For TIBCO Silver BPM Service version 1.0.1, update to a version that addresses the issue. For TIBCO Silver CAP Service version 1.0.0, update to a version that addresses the issue.

Fix

Related Identifiers

CVE-2010-4495

Affected Products

Tibco Activematrix Bpm

Tibco Activematrix Businessworks Service Engine

Tibco Activematrix Service Bus

Tibco Activematrix Service Grid

Tibco Silver Bpm Service

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-4495 · Security Note
• http://secunia.com/advisories/42640 · Vendor Advisory
• http://tibco.com/multimedia/activematrix_advisory_20101214_tcm8-12728.txt · Vendor Advisory
• http://vupen.com/english/advisories/2010/3241 · Vendor Advisory
• http://securitytracker.com/id?1024894 · Note
• http://securityfocus.com/bid/45400 · Note