CVE-2018-5430

🗓️ 17 Apr 2018 18:00:00Reported by tibcoType

cve🔗 web.nvd.nist.gov👁 710 Views🌐 WEB

TIBCO JasperReports Server web flows vulnerability allows read-only access to application content

Reporter	Title	Published	Views	Family All 22
zdt	JasperReports - Authenticated File Read Vulnerability	15 May 201800:00	–	zdt
ATTACKERKB	TIBCO JasperReports Server Information Disclosure Vulnerability	17 Apr 201800:00	–	attackerkb
BDU FSTEC	The vulnerability in applications for creating reports using TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS arises due to an incorrect path name limitation in the restricted directory. This allows attackers to disclose sensitive information.	7 Mar 202300:00	–	bdu_fstec
Circl	CVE-2018-5430	14 Jun 202321:10	–	circl
CISA KEV Catalog	TIBCO JasperReports Server Information Disclosure Vulnerability	29 Dec 202200:00	–	cisa_kev
CNVD	Multiple TIBCO Products Spring web flows Component Information Disclosure Vulnerability	19 Apr 201800:00	–	cnvd
Cvelist	CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability	17 Apr 201818:00	–	cvelist
Debian CVE	CVE-2018-5430	17 Apr 201818:00	–	debiancve
Exploit DB	JasperReports - (Authenticated) File Read	3 May 201800:00	–	exploitdb
NVD	CVE-2018-5430	17 Apr 201818:29	–	nvd

NVD

Node

tibco jasperreports_serverRange≤6.2.4

tibco jasperreports_serverRange≤6.4.2activematrix_bpm

tibco jasperreports_serverRange≤6.4.2community

tibco jasperreports_serverMatch6.3.0

tibco jasperreports_serverMatch6.3.2

tibco jasperreports_serverMatch6.3.3

tibco jasperreports_serverMatch6.4.0

tibco jasperreports_serverMatch6.4.2

Node

tibco jaspersoftRange≤6.4.2aws_with_multi-tenancy

tibco jaspersoft_reporting_and_analyticsRange≤6.4.2aws

[
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.2.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.3.0"
      },
      {
        "status": "affected",
        "version": "6.3.2"
      },
      {
        "status": "affected",
        "version": "6.3.3"
      },
      {
        "status": "affected",
        "version": "6.4.0"
      },
      {
        "status": "affected",
        "version": "6.4.2"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server Community Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft for AWS with Multi-Tenancy",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft Reporting and Analytics for AWS",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "6.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
rhinosecuritylabs	www.rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/
exploit-db	www.exploit-db.com/exploits/44623/
tibco	www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
_flowId	query param	jasperserver/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/adminImport	Directory traversal leading to privileged JSP inclusion (adminImport)	CWE-22, CWE-200
page	query param	jasperserver/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/adminImport	Directory traversal leading to privileged JSP inclusion (adminImport)	CWE-22, CWE-200
_flowId	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/awsConfiguration	Directory traversal to access AWS configuration functionality	CWE-22, CWE-200
page	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/awsConfiguration	Directory traversal to access AWS configuration functionality	CWE-22, CWE-200
_flowId	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../js.jdbc.properties	Local file read via unsanitized page parameter including configuration file	CWE-22, CWE-200
page	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../js.jdbc.properties	Local file read via unsanitized page parameter including configuration file	CWE-22, CWE-200
_flowId	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/file	Local file inclusion (JSP) via page parameter traversal	CWE-22, CWE-200
page	query param	jasperserver-pro/flow.html?_flowId=sampleFlow&page=../../../jsp/modules/administer/file	Local file inclusion (JSP) via page parameter traversal	CWE-22, CWE-200
{param}	query param	jasperserver-pro/___________?{param}=..	Accessing administrator export functions via path traversal on a parameterized endpoint	CWE-22, CWE-200

17 Jun 2026 02:00Current

8High risk

Vulners AI Score8

CVSS 24

CVSS 3.18.8

CVSS 37.7

EPSS0.4963

SSVC

tibco jasperreports server web application security vulnerability read-only access nvd cve-2018-5430