PT-2019-15093 · Tibco · Tibco Ebx Add-Ons

Publicado 2019-11-12 · Atualizado 2019-11-15 · CVE-2019-17332

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TIBCO EBX Add-ons versions up to and including 3.20.13 TIBCO EBX Add-ons versions 4.1.0 through 4.2.2

Description The Digital Asset Manager Web Interface component contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

Recommendations For TIBCO EBX Add-ons versions up to and including 3.20.13, update to a version later than 3.20.13 to resolve the issue. For TIBCO EBX Add-ons versions 4.1.0 through 4.2.2, update to a version later than 4.2.2 to resolve the issue. As a temporary workaround, consider restricting access to the Digital Asset Manager Web Interface component until a patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-17332

Produtos afetados

Tibco Ebx Add-Ons

Referências · 4

• https://tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-add-on-2019-17332 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17332 · Nota de Segurança
• http://tibco.com/services/support/advisories · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-17332 · Aviso do Fabricante