Search criteria
3 vulnerabilities found for activematrix_policy_manager by tibco
FKIE_CVE-2014-5286
Vulnerability from fkie_nvd - Published: 2015-02-19 02:59 - Updated: 2025-04-12 10:46
Severity ?
Summary
The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| tibco | activematrix_management_agent | 1.0.0 | |
| tibco | activematrix_management_agent | 1.0.0 | |
| tibco | activematrix_management_agent | 1.1.0 | |
| tibco | activematrix_management_agent | 1.1.0 | |
| tibco | activematrix_management_agent | 1.2.0 | |
| tibco | activematrix_management_agent | 1.2.0 | |
| tibco | activematrix_policy_agent | 3.0.0 | |
| tibco | activematrix_policy_agent | 3.1.0 | |
| tibco | activematrix_policy_agent | 3.1.1 | |
| tibco | activematrix_policy_manager | 3.0.0 | |
| tibco | activematrix_policy_manager | 3.1.0 | |
| tibco | activematrix_policy_manager | 3.1.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:tibco:activematrix_management_agent:1.0.0:*:*:*:*:websphere:*:*",
"matchCriteriaId": "EB3063F2-3B1A-45CD-A8D6-95DA8DE7CB8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_management_agent:1.0.0:*:*:*:*:windows_communication_foundation:*:*",
"matchCriteriaId": "6966EA26-3DFB-4D2B-B784-12B27D580658",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_management_agent:1.1.0:*:*:*:*:websphere:*:*",
"matchCriteriaId": "8DD30572-B190-43EA-8018-F1CC83485143",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_management_agent:1.1.0:*:*:*:*:windows_communication_foundation:*:*",
"matchCriteriaId": "5C5C3D32-B556-4497-845A-7EFCB79C592A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_management_agent:1.2.0:*:*:*:*:websphere:*:*",
"matchCriteriaId": "EA3EE86D-3D3F-4E28-A561-27419534AD92",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_management_agent:1.2.0:*:*:*:*:windows_communication_foundation:*:*",
"matchCriteriaId": "F2BF92F9-1851-4EF2-808B-F12579C387F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_policy_agent:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "26F541DE-7CF5-42F5-965D-844D765532CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_policy_agent:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2F85A68-A4C8-4F6C-AB15-66A96D6510CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_policy_agent:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5BE04D58-1BAF-46D8-B9C5-B95F8E359275",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_policy_manager:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B9464AF8-BBA8-4D83-B29E-DD51AF4F8074",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_policy_manager:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CBBBC2BC-5F48-47DA-BDA4-BF7315512249",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:tibco:activematrix_policy_manager:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E72B7037-EC98-4F9A-8702-0B073AEC24A3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors."
},
{
"lang": "es",
"value": "El m\u00f3dulo ActiveMatrix Policy Manager Authentication en TIBCO ActiveMatrix Policy Agent 3.x anterior a 3.1.2, ActiveMatrix Policy Manager 3.x anterior a 3.1.2, ActiveMatrix Management Agent 1.x anterior a 1.2.1 para WCF, y ActiveMatrix Management Agent 1.x anterior a 1.2.1 para WebSphere permite a atacantes remotos ganar privilegios y obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2014-5286",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-02-19T02:59:28.633",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"source": "cve@mitre.org",
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2014-5286 (GCVE-0-2014-5286)
Vulnerability from cvelistv5 – Published: 2015-02-19 02:00 – Updated: 2024-08-06 11:41
VLAI?
Summary
The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T11:41:47.991Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-02-18T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2015-02-19T02:57:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-5286",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt",
"refsource": "CONFIRM",
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"name": "http://www.tibco.com/mk/advisory.jsp",
"refsource": "CONFIRM",
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"name": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218",
"refsource": "CONFIRM",
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-5286",
"datePublished": "2015-02-19T02:00:00",
"dateReserved": "2014-08-16T00:00:00",
"dateUpdated": "2024-08-06T11:41:47.991Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2014-5286 (GCVE-0-2014-5286)
Vulnerability from nvd – Published: 2015-02-19 02:00 – Updated: 2024-08-06 11:41
VLAI?
Summary
The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T11:41:47.991Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-02-18T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2015-02-19T02:57:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-5286",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt",
"refsource": "CONFIRM",
"url": "http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt"
},
{
"name": "http://www.tibco.com/mk/advisory.jsp",
"refsource": "CONFIRM",
"url": "http://www.tibco.com/mk/advisory.jsp"
},
{
"name": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218",
"refsource": "CONFIRM",
"url": "http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-5286",
"datePublished": "2015-02-19T02:00:00",
"dateReserved": "2014-08-16T00:00:00",
"dateUpdated": "2024-08-06T11:41:47.991Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}