Secunia
Login
|
|
|
|
|
|
|
|
|
TIBCO ActiveMatrix Products JMX Connections Code Execution Vulnerability
Release Date: 2010-10-20 Views: 2,207
Secunia Advisory SA41891
Where:
From local network
Impact:
System access,
Solution Status:
Vendor Patch
Software:
CVE Reference(s):
Description
A vulnerability has been reported in TIBCO ActiveMatrix products, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to an unspecified error in the "TIBCO ActiveMatrix Runtime" and "TIBCO ActiveMatrix Administrator" components when handing JMX connections, which can be exploited to execute arbitrary code.
The vulnerability is reported in the following products:
* TIBCO ActiveMatrix Service Grid versions prior to 2.3.1
* TIBCO ActiveMatrix Service Bus versions prior to 2.3.1
* TIBCO ActiveMatrix BusinessWorks Service Engine versions prior to 5.8.1
* TIBCO ActiveMatrix Service Performance Manager versions prior to 1.3.2
Solution:
Update to the latest version.
Further details available to Secunia VIM customers
Provided and/or discovered by:
Reported by the vendor.
Original Advisory:
http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp
http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt
Deep Links:
Links available to Secunia VIM customers
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
Subject: TIBCO ActiveMatrix Products JMX Connections Code Execution Vulnerability
|
No posts yet |
|
You must be logged in to post a comment. |
