CVE-2018-5430

🗓️ 17 Apr 2018 18:00:00Reported by tibcoType

cve🔗 web.nvd.nist.gov👁 632 Views🌐 WEB

TIBCO JasperReports Server web flows vulnerability allows read-only access to application content

Reporter	Title	Published	Views	Family All 21
0day.today	JasperReports - Authenticated File Read Vulnerability	15 May 201800:00	–	zdt
ATTACKERKB	TIBCO JasperReports Server Information Disclosure Vulnerability	17 Apr 201800:00	–	attackerkb
BDU FSTEC	The vulnerability in applications for creating reports using TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS arises due to an incorrect path name limitation in the restricted directory. This allows attackers to disclose sensitive information.	7 Mar 202300:00	–	bdu_fstec
Circl	CVE-2018-5430	14 Jun 202321:10	–	circl
CISA KEV Catalog	TIBCO JasperReports Server Information Disclosure Vulnerability	29 Dec 202200:00	–	cisa_kev
CNVD	Multiple TIBCO Products Spring web flows Component Information Disclosure Vulnerability	19 Apr 201800:00	–	cnvd
Cvelist	CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability	17 Apr 201818:00	–	cvelist
Debian CVE	CVE-2018-5430	17 Apr 201818:00	–	debiancve
NVD	CVE-2018-5430	17 Apr 201818:29	–	nvd
OSV	CVE-2018-5430	17 Apr 201818:29	–	osv

NVD

Node

tibco jasperreports_serverRange≤6.2.4

tibco jasperreports_serverRange≤6.4.2activematrix_bpm

tibco jasperreports_serverRange≤6.4.2community

tibco jasperreports_serverMatch6.3.0

tibco jasperreports_serverMatch6.3.2

tibco jasperreports_serverMatch6.3.3

tibco jasperreports_serverMatch6.4.0

tibco jasperreports_serverMatch6.4.2

Node

tibco jaspersoftRange≤6.4.2aws_with_multi-tenancy

tibco jaspersoft_reporting_and_analyticsRange≤6.4.2aws

[
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.2.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.3.0"
      },
      {
        "status": "affected",
        "version": "6.3.2"
      },
      {
        "status": "affected",
        "version": "6.3.3"
      },
      {
        "status": "affected",
        "version": "6.4.0"
      },
      {
        "status": "affected",
        "version": "6.4.2"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server Community Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft for AWS with Multi-Tenancy",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft Reporting and Analytics for AWS",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
rhinosecuritylabs	www.rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/
exploit-db	www.exploit-db.com/exploits/44623/
tibco	www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
_flowId	query param	jasperserver/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/adminImport	Authenticated traversal to include administrator components via flow parameter manipulating page to a JSP module	CWE-200, CWE-22
page	query param	jasperserver/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/adminImport	Authenticated traversal to include administrator components via flow parameter manipulating page to a JSP module	CWE-200, CWE-22
_flowId	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/awsConfiguration	Traversal to load privileged administrator AWS configuration using flow and page parameters	CWE-200, CWE-22
page	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/awsConfiguration	Traversal to load privileged administrator AWS configuration using flow and page parameters	CWE-200, CWE-22
_flowId	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../js.jdbc.properties;	Local file read via traversal to read server configuration properties	CWE-200, CWE-22
page	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../js.jdbc.properties;	Local file read via traversal to read server configuration properties	CWE-200, CWE-22
_flowId	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/file	Local File Inclusion (JSP) by traversing to a sensitive file and triggering JSP inclusion	CWE-200, CWE-22
page	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/file	Local File Inclusion (JSP) by traversing to a sensitive file and triggering JSP inclusion	CWE-200, CWE-22

17 Jun 2026 02:00Current

8High risk

Vulners AI Score8

CVSS 24

CVSS 3.18.8

CVSS 37.7

EPSS0.48753

SSVC

tibco jasperreports server web application security vulnerability read-only access nvd cve-2018-5430