Lucene search

TibcoCVE-2022-30570

HistoryJul 19, 2022 - 6:15 p.m.

CVE-2022-30570

2022-07-1918:15:11

tibco

web.nvd.nist.gov

tibco

data virtualization

aws marketplace

cve-2022-30570

security vulnerability

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.5.2 and below and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.2 and below.

Affected configurations

Nvd

Node

tibcodata_virtualizationRange≤8.5.2

tibcodata_virtualization_for_aws_marketplaceRange≤8.5.2

VendorProductVersionCPE
tibcodata_virtualization*cpe:2.3:a:tibco:data_virtualization:*:*:*:*:*:*:*:*
tibcodata_virtualization_for_aws_marketplace*cpe:2.3:a:tibco:data_virtualization_for_aws_marketplace:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	data_virtualization	*	cpe:2.3:a:tibco:data_virtualization::::::::
tibco	data_virtualization_for_aws_marketplace	*	cpe:2.3:a:tibco:data_virtualization_for_aws_marketplace::::::::

CNA Affected

[
  {
    "product": "TIBCO Data Virtualization",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "8.5.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO Data Virtualization for AWS Marketplace",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "8.5.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.tibco.com/services/support/advisories

www.tibco.com/support/advisories/2022/06/tibco-security-advisory-july-19-2022-tdv-cve-2022-30570

Social References

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Related for CVE-2022-30570