CVE-2022-41561

Опубликовано: 13 дек. 2022

Источник: nvd

CVSS3: 9.1

CVSS3: 7.2

EPSS Низкий

Описание

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows a privileged/administrative attacker with network access to execute Remote Code Execution to obtain a reverse shell on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 8.0.2 and below, TIBCO JasperReports Server: version 8.1.0, TIBCO JasperReports Server - Community Edition: versions 8.1.0 and below, TIBCO JasperReports Server - Developer Edition: versions 8.1.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 8.0.2 and below, TIBCO JasperReports Server for AWS M

Ссылки

https://www.tibco.com/services/support/advisories
Vendor Advisory
https://www.tibco.com/support/advisories/2022/12/tibco-security-advisory-december-13-2022-tibco-jasperreports-server-cve-2022-41561
Vendor Advisory
https://www.tibco.com/services/support/advisories
Vendor Advisory
https://www.tibco.com/support/advisories/2022/12/tibco-security-advisory-december-13-2022-tibco-jasperreports-server-cve-2022-41561
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:aws_marketplace:*:*

Версия до 8.0.2 (включая)

cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:microsoft_azure:*:*

Версия до 8.0.2 (включая)

cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:-:-:*:*

Версия до 8.0.2 (включая)

cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:community:*:*:*

Версия до 8.1.0 (включая)

cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:developer:*:*:*

Версия до 8.1.0 (включая)

cpe:2.3:a:tibco:jasperreports_server:8.1.0:*:*:*:*:aws_marketplace:*:*

cpe:2.3:a:tibco:jasperreports_server:8.1.0:*:*:*:*:microsoft_azure:*:*

cpe:2.3:a:tibco:jasperreports_server:8.1.0:*:*:*:-:-:*:*

EPSS

Процентиль: 89%

0.04248

Низкий

9.1 Critical

CVSS3

7.2 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2022-41561

CVSS3: 9.1

ubuntu

около 3 лет назад

GHSA-6jvq-qq93-6gh3

CVSS3: 7.2

github

около 3 лет назад

EPSS

Процентиль: 89%

0.04248

Низкий

9.1 Critical

CVSS3

7.2 High

CVSS3

Дефекты

NVD-CWE-noinfo