Description
The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a network message, which might make it easier for remote attackers to capture message contents by sniffing the network.
References
- 1018512 vdb-entry
- 20070730 Security Testing Enterprise Messaging Systems mailing-list
- 46992 vdb-entry
- http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf
- ADV-2007-2814 vdb-entry