CVE-2010-3491 Other in n/a
Remote attackers can execute arbitrary code, read sensitive data, or cause denial of service in TIBCO ActiveMatrix components via improper JMX connection handling.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-3491?
CVE-2010-3491 is a critical vulnerability in n/a, published on 26 Oct 2010. It can be exploited over the network, with no action from the victim.
Official description
The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.
Weakness: CWE-20
Which versions are affected by CVE-2010-3491?
It affects 4 products.
Products include Tibco Activematrix Businessworks Service Engine, Tibco Activematrix Service Bus, Tibco Activematrix Service Grid, Tibco Activematrix Service Performance Manager.
How do I fix CVE-2010-3491?
No fix has been published for CVE-2010-3491 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-3491 being exploited?
There is no known exploitation of CVE-2010-3491 in the wild and no public exploit code.
Sources
Also known as GHSA-jcvj-9pfw-q2cg.