CVE-2010-0184 Privilege escalation in n/a
Local attackers can read weakly protected domain property files to steal administrator credentials and escalate privileges across all domain systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-0184?
CVE-2010-0184 is a high-severity vulnerability in n/a, published on 14 Jan 2010. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2010-0184?
It affects 1 product.
Products include Tibco Runtime Agent.
How do I fix CVE-2010-0184?
No fix has been published for CVE-2010-0184 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-0184 being exploited?
There is no known exploitation of CVE-2010-0184 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f23h-24h4-f4x9.