CVE-2010-0184 The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak pe...
HighCVSS 7.2
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco runtime agent | <= 5.6.1 | No fix listed |
| tibco runtime agent | = 5.4.0 | No fix listed |
| tibco runtime agent | = 5.5.3 | No fix listed |
| tibco runtime agent | = 5.5.4 | No fix listed |
| tibco runtime agent | = 5.6 | No fix listed |
References
- 38191 third-party-advisory vendor-advisory
- 37805 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com
- ADV-2010-0128 vdb-entry vendor-advisory