PT-2012-2794 · Tibco · Tibco Bpm+4

Publicado 2012-03-13 · Atualizado 2012-03-13 · CVE-2012-0689

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Platform versions 3.1.3 TIBCO Silver Fabric ActiveMatrix Service Grid Distribution versions 3.1.3 TIBCO Service Grid and Service Bus versions prior to 3.1.5 TIBCO BusinessWorks Service Engine versions prior to 5.9.3 TIBCO BPM versions prior to 1.3.0

Description The issue allows remote attackers to discover credentials via unspecified vectors.

Recommendations For TIBCO ActiveMatrix Platform version 3.1.3, update to a newer version to resolve the issue. For TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3, update to a newer version to resolve the issue. For TIBCO Service Grid and Service Bus versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue. For TIBCO BusinessWorks Service Engine versions prior to 5.9.3, update to version 5.9.3 or later to resolve the issue. For TIBCO BPM versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-0689

Produtos afetados

Tibco Activematrix Platform

Tibco Bpm

Tibco Businessworks Service Engine

Tibco Service Grid/Service Bus

Tibco Silver Fabric Activematrix Service Grid Distribution

Referências · 3

• http://tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0689 · Nota de Segurança
• http://tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt · Aviso do Fabricante