In Pivotal tc Server, 3.x versions before 3.2.19 and 4.x versions before 4.0.10, and Pivotal tc Runtimes, 7.x versions before 7.0.99.B, 8.x versions before 8.5.47.A, and 9.x versions before 9.0.27.A, when a tc Runtime instance is configured with the JMX Socket Listener, a local attacker without access to the tc Runtime process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the tc Runtime instance.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
pivotal tc runtimes |
||
pivotal tc server |
Vulmon