CVE:CVE-2010-4495
CNNVD:CNNVD-201012-252
TIBCO ActiveMatrix Service Grid 3.0.0，3.0.1，以及3.1.0版本；ActiveMatrix Service Bus 3.0.0以及3.0.1版本；ActiveMatrix BusinessWorks Service Engine 5.9.0版本；ActiveMatrix BPM 1.0.1以及1.0.2版本；Silver BPM Service 1.0.1版本；Silver CAP Service 1.0.0版本中的ActiveMatrix Runtime组件中存在未明漏洞。远程认证用户可以借助和JMX连接有关的向量执行任意代码。
solution:Upgrade tibco activematrix_bpm to a higher version than 1.0.1,1.0.2,and avoid the version 1.0.1,1.0.2; Upgrade tibco activematrix_businessworks_service_engine to a higher version than 5.9.0,and avoid the version 5.9.0; Upgrade tibco activematrix_service_bus to a higher version than 3.0.0,3.0.1,and avoid the version 3.0.0,3.0.1; Upgrade tibco activematrix_service_grid to a higher version than 3.0.0,3.0.1,3.1.0,and avoid the version 3.0.0,3.0.1,3.1.0; Upgrade tibco silver_bpm_service to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade tibco silver_cap_service to a higher version than 1.0.0,and avoid the version 1.0.0