PT-2014-4469 · Tibco · Tibco Enterprise Administrator

Publicado 2014-02-27 · Atualizado 2014-02-27 · CVE-2014-2075

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Enterprise Administrator version 1.0.0 TIBCO Enterprise Administrator SDK version 1.0.0

Description The issue is related to the improper enforcement of administrative authentication requirements. This allows remote attackers to execute arbitrary commands.

Recommendations For TIBCO Enterprise Administrator version 1.0.0, update the software to enforce proper administrative authentication. For TIBCO Enterprise Administrator SDK version 1.0.0, update the SDK to enforce proper administrative authentication.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-2075

Produtos afetados

Tibco Enterprise Administrator

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2075 · Nota de Segurança
• http://tibco.com/multimedia/enterprise_administator_advisory_20140226_tcm8-20533.txt · Aviso do Fabricante
• http://tibco.com/mk/advisory.jsp · Aviso do Fabricante