PT-2023-13993 · Tibco Software · Tibco Businessconnect

CVE-2022-41567 · Publicado 2023-02-22 · Atualizado 2023-03-02

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TIBCO BusinessConnect versions 7.3.0 and below

Description The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable issue that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system.

Recommendations For versions 7.3.0 and below, update to a version above 7.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the BusinessConnect UI component to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-41567

Produtos afetados

Tibco Businessconnect

Referências · 4

• https://t.me/cibsecurity/58696 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-41567 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-41567 · Nota de Segurança
• https://tibco.com/services/support/advisories · Aviso do Fabricante