{"api_version":"1","generated_at":"2026-07-23T10:16:27+00:00","cve":"CVE-2010-0683","urls":{"html":"https://cve.report/CVE-2010-0683","api":"https://cve.report/api/cve/CVE-2010-0683.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-0683","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-0683"},"summary":{"title":"CVE-2010-0683","description":"Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-02-25 19:30:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6","severity":"","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/0463","name":"http://www.vupen.com/english/advisories/2010/0463","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp","name":"http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"TIBCO | TIBCO Administrator Security Advisory FAQ","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/38396","name":"http://www.securityfocus.com/bid/38396","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TIBCO Administrator 'TIBRepoServer5.jar' Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt","name":"http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"404 Not Found","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/38732","name":"http://secunia.com/advisories/38732","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"TIBCO Administrator Unspecified Security Bypass Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0683","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0683","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"683","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"administrator","cpe6":"5.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"683","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"administrator","cpe6":"5.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:59:38.300Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2010-0463","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0463"},{"name":"38732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38732"},{"name":"38396","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/38396"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-02-25T19:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ADV-2010-0463","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0463"},{"name":"38732","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38732"},{"name":"38396","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/38396"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-0683","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2010-0463","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0463"},{"name":"38732","refsource":"SECUNIA","url":"http://secunia.com/advisories/38732"},{"name":"38396","refsource":"BID","url":"http://www.securityfocus.com/bid/38396"},{"name":"http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt","refsource":"CONFIRM","url":"http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt"},{"name":"http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp","refsource":"CONFIRM","url":"http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-0683","datePublished":"2010-02-25T19:00:00.000Z","dateReserved":"2010-02-22T00:00:00.000Z","dateUpdated":"2024-09-16T16:23:30.010Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-02-25 19:30:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:administrator:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EA22577B-936B-4DC5-923B-C6648E33C58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:administrator:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D76965A4-ED77-4D7D-AF1A-3E91A9158BC3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"683","Ordinal":"1","Title":"CVE-2010-0683","CVE":"CVE-2010-0683","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"683","Ordinal":"1","NoteData":"Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials.","Type":"Description","Title":"CVE-2010-0683"},{"CveYear":"2010","CveId":"683","Ordinal":"2","NoteData":"2010-02-25","Type":"Other","Title":"Published"}]}}}