Unscored severity · published Jan 14, 2010
CVE-2010-0184
The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Runtime Agent · Tibco
through 5.6.1; 5.4.0; 5.5.3; 5.5.4; 5.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0184
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0184
Vendor Advisory
http://secunia.com/advisories/38191
www.securityfocus.com
http://www.securityfocus.com/bid/37805
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
www.tibco.com
http://www.tibco.com/multimedia/security_advisory_runtime_agent_20100113_tcm8-10392.txt
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0128
More from Runtime Agent
9.6
CVE-2021-28827
The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise…
8.8
CVE-2023-26219
The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and…
6.5
CVE-2018-5434
The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML…
–
CVE-2011-0649
Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver…
–
CVE-2008-3338
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0;…