CVE-2010-3491 — Improper Input Validation in Activematrix Businessworks Service Engine

CWE-20 — Improper Input Validation3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
4.8%
top 10.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Tibco Activematrix Businessworks Service EngineTibco Activematrix Service BUSTibco Activematrix Service Grid+1 more
Timeline
PublishedOct 26
Latest updateMay 17

Description

The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

Patches

Patch: www.tibco.com ↗Patch: www.tibco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jcvj-9pfw-q2cg: The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2↗2022-05-17
▶
CVEList
CVE-2010-3491: The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2↗2010-10-26
▶
CVE-2010-3491 — Improper Input Validation | cvebase