CVE-2010-0683

{"id": "CVE-2010-0683", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-02-25T19:30:00.547", "references": [{"url": "http://secunia.com/advisories/38732", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/38396", "source": "cve@mitre.org"}, {"url": "http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/0463", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en TIBRepoServer5.jar en TIBCO Administrator desde v5.4.0 hasta v5.6.0, cuando se utiliza JMS transport, permite a usuarios remotos autenticados ejecutar c\u00f3digo arbitrario en todos los nodos de dominio a trav\u00e9s de vectores relacionados con las credenciales administrativas."}], "lastModified": "2010-02-26T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tibco:administrator:5.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA22577B-936B-4DC5-923B-C6648E33C58D"}, {"criteria": "cpe:2.3:a:tibco:administrator:5.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D76965A4-ED77-4D7D-AF1A-3E91A9158BC3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}