Lucene search

[email protected]CVE-2019-11209

HistoryAug 20, 2019 - 6:15 p.m.

CVE-2019-11209

2019-08-2018:15:11

[email protected]

web.nvd.nist.gov

cve-2019-11209

tibco

software inc.

ftl

realm configuration

access control

vulnerability

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition 6.0.0; 6.0.1; 6.1.0, TIBCO FTL Developer Edition 6.0.1; 6.1.0, and TIBCO FTL Enterprise Edition 6.0.0; 6.0.1; 6.1.0.

Affected configurations

NVD

Node

tibcoftlMatch6.0.0community

tibcoftlMatch6.0.0enterprise

tibcoftlMatch6.0.1community

tibcoftlMatch6.0.1developer

tibcoftlMatch6.0.1enterprise

tibcoftlMatch6.1.0community

tibcoftlMatch6.1.0developer

tibcoftlMatch6.1.0enterprise

CPENameOperatorVersion
tibco:ftltibco ftleq6.0.0
tibco:ftltibco ftleq6.0.1
tibco:ftltibco ftleq6.1.0

CPE	Name	Operator	Version
tibco:ftl	tibco ftl	eq	6.0.0
tibco:ftl	tibco ftl	eq	6.0.1
tibco:ftl	tibco ftl	eq	6.1.0

CNA Affected

[
  {
    "product": "TIBCO FTL Community Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0"
      },
      {
        "status": "affected",
        "version": "6.0.1"
      },
      {
        "status": "affected",
        "version": "6.1.0"
      }
    ]
  },
  {
    "product": "TIBCO FTL Developer Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.1"
      },
      {
        "status": "affected",
        "version": "6.1.0"
      }
    ]
  },
  {
    "product": "TIBCO FTL Enterprise Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0"
      },
      {
        "status": "affected",
        "version": "6.0.1"
      },
      {
        "status": "affected",
        "version": "6.1.0"
      }
    ]
  }
]

References

www.tibco.com/services/support/advisories

www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-20-2019-tibco-ftl

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

Related for CVE-2019-11209

cvelist1 nvd1 prion1