PT-2019-19289 · Tibco · Tibco Jasperreports Server For Activematrix Bpm+1

Publicado 2019-03-07 · Atualizado 2022-01-01 · CVE-2019-8986

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TIBCO JasperReports Server versions up to and including 6.4.3 TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.3

Description The issue allows a malicious authenticated user to copy text files from the host operating system through the SOAP API component.

Recommendations For TIBCO JasperReports Server versions up to and including 6.4.3, update to a version later than 6.4.3 to resolve the issue. For TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.3, update to a version later than 6.4.3 to resolve the issue.

Correção

Identificadores relacionados

CVE-2019-8986

Produtos afetados

Tibco Jasperreports Server

Tibco Jasperreports Server For Activematrix Bpm

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-8986 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-8986 · Aviso do Fabricante
• https://tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-8986 · Aviso do Fabricante
• http://tibco.com/services/support/advisories · Aviso do Fabricante