PT-2017-16561 · Tibco · Tibbr Enterprise+1

Published 2017-12-13 · Updated 2019-10-09 · CVE-2017-5530

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions tibbr Community versions 5.2.1 and below tibbr Community version 6.0.0 tibbr Community version 6.0.1 tibbr Community version 7.0.0 tibbr Enterprise versions 5.2.1 and below tibbr Enterprise version 6.0.0 tibbr Enterprise version 6.0.1 tibbr Enterprise version 7.0.0

Description The issue is related to SAML protocol handling errors in the tibbr web server components of tibbr Community and tibbr Enterprise. This may allow authorized users to impersonate other users, potentially escalating their access privileges.

Recommendations For tibbr Community versions 5.2.1 and below, consider updating to a version above 5.2.1 to resolve the issue. For tibbr Community version 6.0.0, consider updating to a version above 6.0.0 to resolve the issue. For tibbr Community version 6.0.1, consider updating to a version above 6.0.1 to resolve the issue. For tibbr Community version 7.0.0, consider updating to a version above 7.0.0 to resolve the issue. For tibbr Enterprise versions 5.2.1 and below, consider updating to a version above 5.2.1 to resolve the issue. For tibbr Enterprise version 6.0.0, consider updating to a version above 6.0.0 to resolve the issue. For tibbr Enterprise version 6.0.1, consider updating to a version above 6.0.1 to resolve the issue. For tibbr Enterprise version 7.0.0, consider updating to a version above 7.0.0 to resolve the issue.

Fix

Related Identifiers

CVE-2017-5530

Affected Products

Tibbr Community

Tibbr Enterprise

References · 3

• https://tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5530 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5530 · Security Note