tcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation

In Pivotal tc Server, 3.x versions prior to 3.2.19 and 4.x versions prior to 4.0.10, and Pivotal tc Runtimes, 7.x versions prior to 7.0.99.B, 8.x versions prior to 8.5.47.A, and 9.x versions prior to 9.0.27.A, when a tc Runtime instance is configured with the JMX Socket Listener, a local attacker without access to the tc Runtime process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the tc Runtime instance.

N/A

特权管理不恰当

Pivotal Software tc Server和Runtime 安全漏洞

Pivotal Software tc Server和tc Runtimes中存在安全漏洞。本地攻击者可通过操纵RMI注册表进行中间人攻击利用该漏洞捕获用户名和密码，进而访问JMX接口并完全控制tc Runtime实例。以下产品及版本受到影响：Pivotal tc Server 3.2.19之前的3.x版本，4.0.10之前的4.x版本；tc Runtimes 7.0.99.B之前的7.x版本，8.5.47.A之前的8.x版本，9.0.27.A之前的9.x版本。

N/A

N/A