CVE-2010-0184: High severity TIBCO Runtime Agent vulnerability
The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0184?
CVE-2010-0184 is rated as a high severity vulnerability due to the exposure of domain administrator credentials.
How do I fix CVE-2010-0184?
To fix CVE-2010-0184, update to TIBCO Runtime Agent version 5.6.2 or later, which addresses the weak permissions on domain properties files.
What components are affected by CVE-2010-0184?
The affected components of CVE-2010-0184 are the domainutility and domainutilitycmd in TIBCO Domain Utility.
Can local users exploit CVE-2010-0184?
Yes, local users can exploit CVE-2010-0184 to obtain domain administrator credentials due to weak permissions set on the domain properties files.
Which versions of TIBCO Runtime Agent are vulnerable to CVE-2010-0184?
TIBCO Runtime Agent versions before 5.6.2, including 5.4.0, 5.5.3, 5.5.4, and 5.6 are vulnerable to CVE-2010-0184.