Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-28829

Опубликовано: 20 апр. 2021
Источник: nvd
CVSS3: 6.5
CVSS3: 8
CVSS2: 6
EPSS Низкий

Описание

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a persistent CSV injection attack from the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administr

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\/linux:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:*
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\/linux:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\/linux:*:*

EPSS

Процентиль: 51%
0.00275
Низкий

6.5 Medium

CVSS3

8 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

github
больше 3 лет назад

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a persistent CSV injection attack from the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Admini...

EPSS

Процентиль: 51%
0.00275
Низкий

6.5 Medium

CVSS3

8 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-74