CVE-2018-5430

🗓️ 17 Apr 2018 18:00:00Reported by tibcoType

cve🔗 web.nvd.nist.gov👁 647 Views🌐 WEB

TIBCO JasperReports Server web flows vulnerability allows read-only access to application content

Reporter	Title	Published	Views	Family All 21
zdt	JasperReports - Authenticated File Read Vulnerability	15 May 201800:00	–	zdt
attackerkb	TIBCO JasperReports Server Information Disclosure Vulnerability	17 Apr 201800:00	–	attackerkb
bdu_fstec	The vulnerability in applications for creating reports using TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS arises due to an incorrect path name limitation in the restricted directory. This allows attackers to disclose sensitive information.	7 Mar 202300:00	–	bdu_fstec
circl	CVE-2018-5430	14 Jun 202321:10	–	circl
cisa_kev	TIBCO JasperReports Server Information Disclosure Vulnerability	29 Dec 202200:00	–	cisa_kev
cnvd	Multiple TIBCO Products Spring web flows Component Information Disclosure Vulnerability	19 Apr 201800:00	–	cnvd
cvelist	CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability	17 Apr 201818:00	–	cvelist
debiancve	CVE-2018-5430	17 Apr 201818:00	–	debiancve
nvd	CVE-2018-5430	17 Apr 201818:29	–	nvd
osv	CVE-2018-5430	17 Apr 201818:29	–	osv

NVD

Node

tibco jasperreports_serverRange≤6.2.4

tibco jasperreports_serverRange≤6.4.2activematrix_bpm

tibco jasperreports_serverRange≤6.4.2community

tibco jasperreports_serverMatch6.3.0

tibco jasperreports_serverMatch6.3.2

tibco jasperreports_serverMatch6.3.3

tibco jasperreports_serverMatch6.4.0

tibco jasperreports_serverMatch6.4.2

Node

tibco jaspersoftRange≤6.4.2aws_with_multi-tenancy

tibco jaspersoft_reporting_and_analyticsRange≤6.4.2aws

[
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.2.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.3.0"
      },
      {
        "status": "affected",
        "version": "6.3.2"
      },
      {
        "status": "affected",
        "version": "6.3.3"
      },
      {
        "status": "affected",
        "version": "6.4.0"
      },
      {
        "status": "affected",
        "version": "6.4.2"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server Community Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft for AWS with Multi-Tenancy",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft Reporting and Analytics for AWS",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
rhinosecuritylabs	www.rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/
exploit-db	www.exploit-db.com/exploits/44623/
tibco	www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
_flowId	query param	/jasperserver/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/adminImport	Authenticated file read/inclusion via directory traversal in flow parameter leading to access to admin JSPs	CWE-22, CWE-200
page	query param	/jasperserver/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/adminImport	Authenticated file read/inclusion via directory traversal in flow parameter leading to access to admin JSPs	CWE-22, CWE-200
_flowId	query param	/jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/awsConfiguration	Directory traversal to load privileged administrator AWS configuration functionality	CWE-22, CWE-200
page	query param	/jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/awsConfiguration	Directory traversal to load privileged administrator AWS configuration functionality	CWE-22, CWE-200
_flowId	query param	/jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../js.jdbc.properties	Local file read via unsanitized page parameter allowing access to configuration properties	CWE-22, CWE-200
page	query param	/jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../js.jdbc.properties	Local file read via unsanitized page parameter allowing access to configuration properties	CWE-22, CWE-200
_flowId	query param	/jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/file	Local File Inclusion (JSP) via flow page parameter enabling arbitrary file execution	CWE-22, CWE-200
page	query param	/jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/file	Local File Inclusion (JSP) via flow page parameter enabling arbitrary file execution	CWE-22, CWE-200
{param}	query param	/jasperserver-pro/___________?{param}=..	Accessing administrator export functions through a crafted parameter to traverse to privileged resources	CWE-22, CWE-200

17 Jun 2026 02:00Current

8High risk

Vulners AI Score8

CVSS 24

CVSS 3.18.8

CVSS 37.7

EPSS0.48753

SSVC

tibco jasperreports server web application security vulnerability read-only access nvd cve-2018-5430