PT-2022-15661 · Tibco Software · Tibco Auditsafe

Published 2022-02-15 · Updated 2022-02-23 · CVE-2022-22770

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO AuditSafe versions 1.1.0 and below

Description The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains a vulnerability that allows an unauthenticated attacker with network access to execute API methods on the affected system.

Recommendations For versions 1.1.0 and below, consider restricting access to the Web Server component until a fix is available. As a temporary workaround, consider disabling the execution of API methods on the affected system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-22770

Affected Products

Tibco Auditsafe

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-22770 · Security Note
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22770 · Vendor Advisory
• https://t.me/cibsecurity/37509 · Telegram Post