PT-2022-25937 · Tibco Software · Tibco Nimbus

Published 2022-12-06 · Updated 2025-04-22 · CVE-2022-41559

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Nimbus version 10.5.0

Description The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable issue that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this issue requires human interaction from a person other than the attacker.

Recommendations For TIBCO Nimbus version 10.5.0, consider disabling the Web Client component until a patch is available. Restrict access to the affected system to minimize the risk of exploitation. As a temporary workaround, avoid using the Web Client component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-41559

Affected Products

Tibco Nimbus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-41559 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41559 · Vendor Advisory
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://t.me/cibsecurity/54099 · Telegram Post
• https://t.me/cvenotify/119462 · Telegram Post
• https://t.me/cvenotify/39466 · Telegram Post