PT-2011-3557 · Tibco · Tibco Iprocess Engine+1

Published 2011-05-20 · Updated 2017-08-29 · CVE-2011-2021

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TIBCO iProcess Engine versions prior to 11.1.3 TIBCO iProcess Workspace versions prior to 11.3.1

Description A session fixation issue allows remote attackers to hijack web sessions.

Recommendations For TIBCO iProcess Engine versions prior to 11.1.3, update to version 11.1.3 or later. For TIBCO iProcess Workspace versions prior to 11.3.1, update to version 11.3.1 or later.

Fix

Related Identifiers

CVE-2011-2021

Affected Products

Tibco Iprocess Engine

Tibco Iprocess Workspace

References · 8

• http://tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp · Vendor Advisory
• http://secunia.com/advisories/44639 · Vendor Advisory
• http://tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2021 · Security Note
• http://vupen.com/english/advisories/2011/1272 · Vendor Advisory
• http://osvdb.org/72554 · Note
• http://securityfocus.com/bid/47921 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67538 · Note