PT-2019-8894 · Tibco · Tibco Silver Fabric

Published 2019-02-13 · Updated 2019-02-20 · CVE-2018-12409

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Silver Fabric versions up to and including 5.8.1

Description The issue concerns a reflected cross-site scripting (XSS) attack in the SOAP Admin API component. This type of attack occurs when an application takes user input and sends it back to the user without proper validation, allowing an attacker to inject malicious code.

Recommendations For versions up to and including 5.8.1, update to a version later than 5.8.1 to resolve the issue. As a temporary workaround, consider restricting access to the SOAP Admin API component to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-12409

Affected Products

Tibco Silver Fabric

References · 5

• https://osv.dev/vulnerability/CVE-2018-12409 · Vendor Advisory
• https://tibco.com/support/advisories/2019/02/tibco-security-advisory-february-13-2019-tibco-silver-fabric · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12409 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory
• http://securityfocus.com/bid/107024 · Note