PT-2019-8894 · Tibco · Tibco Silver Fabric

Publicado 2019-02-13 · Atualizado 2019-02-20 · CVE-2018-12409

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Silver Fabric versions up to and including 5.8.1

Description The issue concerns a reflected cross-site scripting (XSS) attack in the SOAP Admin API component. This type of attack occurs when an application takes user input and sends it back to the user without proper validation, allowing an attacker to inject malicious code.

Recommendations For versions up to and including 5.8.1, update to a version later than 5.8.1 to resolve the issue. As a temporary workaround, consider restricting access to the SOAP Admin API component to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-12409

Produtos afetados

Tibco Silver Fabric

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-12409 · Aviso do Fabricante
• https://tibco.com/support/advisories/2019/02/tibco-security-advisory-february-13-2019-tibco-silver-fabric · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12409 · Nota de Segurança
• http://tibco.com/services/support/advisories · Aviso do Fabricante
• http://securityfocus.com/bid/107024 · Nota