PT-2021-17939 · Tibco Software+1 · Tibco Rendezvous+2

Published 2021-03-23 · Updated 2022-07-12 · CVE-2021-28818

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TIBCO Rendezvous versions 8.5.1 and below TIBCO Rendezvous Developer Edition versions 8.5.1 and below

Description: The vulnerability in the Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API components of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This issue results from the affected component searching for run-time artifacts outside of the installation hierarchy.

Recommendations: For TIBCO Rendezvous versions 8.5.1 and below, update to a version above 8.5.1 to resolve the issue. For TIBCO Rendezvous Developer Edition versions 8.5.1 and below, update to a version above 8.5.1 to resolve the issue. As a temporary workaround, consider restricting access to the affected components to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2021-28818

Affected Products

Tibco Rendezvous

Tibco Rendezvous Developer Edition

Windows

References · 4

• https://osv.dev/vulnerability/CVE-2021-28818 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28818 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://t.me/cibsecurity/25356 · Telegram Post