PT-2012-2794 · Tibco · Tibco Bpm+4

Published 2012-03-13 · Updated 2012-03-13 · CVE-2012-0689

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Platform versions 3.1.3 TIBCO Silver Fabric ActiveMatrix Service Grid Distribution versions 3.1.3 TIBCO Service Grid and Service Bus versions prior to 3.1.5 TIBCO BusinessWorks Service Engine versions prior to 5.9.3 TIBCO BPM versions prior to 1.3.0

Description The issue allows remote attackers to discover credentials via unspecified vectors.

Recommendations For TIBCO ActiveMatrix Platform version 3.1.3, update to a newer version to resolve the issue. For TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3, update to a newer version to resolve the issue. For TIBCO Service Grid and Service Bus versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue. For TIBCO BusinessWorks Service Engine versions prior to 5.9.3, update to version 5.9.3 or later to resolve the issue. For TIBCO BPM versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-0689

Affected Products

Tibco Activematrix Platform

Tibco Bpm

Tibco Businessworks Service Engine

Tibco Service Grid/Service Bus

Tibco Silver Fabric Activematrix Service Grid Distribution

References · 3

• http://tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0689 · Security Note
• http://tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt · Vendor Advisory