PT-2018-16948 · Tibco · Tibco Data Virtualization

Publicado 2018-06-20 · Atualizado 2019-10-09 · CVE-2018-5428

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Data Virtualization versions 7.0.5 through 7.0.6

Description The issue in TIBCO Data Virtualization may allow for arbitrary command execution due to vulnerabilities in the version control adapters component.

Recommendations For versions 7.0.5 and 7.0.6, update to a version that contains a fix for this issue to prevent arbitrary command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2018-5428

Produtos afetados

Tibco Data Virtualization

Referências · 4

• https://tibco.com/support/advisories/2018/06/tibco-security-advisory-june-20-2018-tibco-data-virtualization · Aviso do Fabricante
• http://securityfocus.com/bid/104518 · Nota
• https://osv.dev/vulnerability/CVE-2018-5428 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5428 · Nota de Segurança