PT-2017-16561 · Tibco · Tibbr Enterprise+1

Publicado 2017-12-13 · Atualizado 2019-10-09 · CVE-2017-5530

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions tibbr Community versions 5.2.1 and below tibbr Community version 6.0.0 tibbr Community version 6.0.1 tibbr Community version 7.0.0 tibbr Enterprise versions 5.2.1 and below tibbr Enterprise version 6.0.0 tibbr Enterprise version 6.0.1 tibbr Enterprise version 7.0.0

Description The issue is related to SAML protocol handling errors in the tibbr web server components of tibbr Community and tibbr Enterprise. This may allow authorized users to impersonate other users, potentially escalating their access privileges.

Recommendations For tibbr Community versions 5.2.1 and below, consider updating to a version above 5.2.1 to resolve the issue. For tibbr Community version 6.0.0, consider updating to a version above 6.0.0 to resolve the issue. For tibbr Community version 6.0.1, consider updating to a version above 6.0.1 to resolve the issue. For tibbr Community version 7.0.0, consider updating to a version above 7.0.0 to resolve the issue. For tibbr Enterprise versions 5.2.1 and below, consider updating to a version above 5.2.1 to resolve the issue. For tibbr Enterprise version 6.0.0, consider updating to a version above 6.0.0 to resolve the issue. For tibbr Enterprise version 6.0.1, consider updating to a version above 6.0.1 to resolve the issue. For tibbr Enterprise version 7.0.0, consider updating to a version above 7.0.0 to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-5530

Produtos afetados

Tibbr Community

Tibbr Enterprise

Referências · 3

• https://tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-5530 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5530 · Nota de Segurança