Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveTibcoCVE-2020-9415
HistoryAug 18, 2020 - 7:15 p.m.

CVE-2020-9415

2020-08-1819:15:14
tibco
web.nvd.nist.gov
26
tibco
data virtualization
server
vulnerability
authenticated user
file download
tibco data virtualization
aws marketplace
nvd
cve-2020-9415

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user must be authenticated and have privileges required to monitor the server in an operational capacity. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 7.0.8 and below, versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 and TIBCO Data Virtualization for AWS Marketplace: versions 8.2.0 and below.

Affected configurations

Nvd
Node
tibcodata_virtualizationRange≤7.0.8
OR
tibcodata_virtualizationMatch8.0.0
OR
tibcodata_virtualizationMatch8.1.0
OR
tibcodata_virtualizationMatch8.1.1
OR
tibcodata_virtualizationMatch8.2.0
OR
tibcodata_virtualization_for_aws_marketplaceRange≤8.2.0
VendorProductVersionCPE
tibcodata_virtualization*cpe:2.3:a:tibco:data_virtualization:*:*:*:*:*:*:*:*
tibcodata_virtualization8.0.0cpe:2.3:a:tibco:data_virtualization:8.0.0:*:*:*:*:*:*:*
tibcodata_virtualization8.1.0cpe:2.3:a:tibco:data_virtualization:8.1.0:*:*:*:*:*:*:*
tibcodata_virtualization8.1.1cpe:2.3:a:tibco:data_virtualization:8.1.1:*:*:*:*:*:*:*
tibcodata_virtualization8.2.0cpe:2.3:a:tibco:data_virtualization:8.2.0:*:*:*:*:*:*:*
tibcodata_virtualization_for_aws_marketplace*cpe:2.3:a:tibco:data_virtualization_for_aws_marketplace:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "TIBCO Data Virtualization",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.0.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "8.0.0"
      },
      {
        "status": "affected",
        "version": "8.1.0"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      },
      {
        "status": "affected",
        "version": "8.2.0"
      }
    ]
  },
  {
    "product": "TIBCO Data Virtualization for AWS Marketplace",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "8.2.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Related

prion 1
nvd 1
tibco 1
cvelist 1
prion
prion
Input validation
2020-08-18 19:15:00
nvd
nvd
CVE-2020-9415
2020-08-18 19:15:14
tibco
tibco
TIBCO Security Advisory: August 18, 2020 - TIBCO DataVirtualization
2020-08-13 21:23:00
cvelist
cvelist
CVE-2020-9415 TIBCO Data Virtualization
2020-08-18 18:50:11

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON
Related for CVE-2020-9415
prion1nvd1tibco1cvelist1