Lucene search
K

CVE-2021-35494 TIBCO JasperReports unauthorized access to temporary object

🗓️ 12 Oct 2021 17:35:11Reported by tibcoType 
cvelist
 cvelist
🔗 www.cve.org👁 20 Views

TIBCO JasperReports unauthorized access to temporary object due to race condition in Rest API, allowing low privileged attacker to obtain read access. Affects various TIBCO JasperReports Server versions

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-35494
12 Oct 202122:25
circl
CNNVD
TIBCO Software JasperReports Server 竞争条件问题漏洞
12 Oct 202100:00
cnnvd
CVE
CVE-2021-35494
12 Oct 202117:35
cve
EUVD
EUVD-2021-22136
7 Oct 202500:30
euvd
NVD
CVE-2021-35494
12 Oct 202118:15
nvd
OSV
BIT-JASPERREPORTS-2021-35494
6 Mar 202410:59
osv
OSV
CVE-2021-35494
12 Oct 202118:15
osv
Prion
Race condition
12 Oct 202118:15
prion
Positive Technologies
PT-2021-20934 · Tibco Software · Tibco Jasperreports Server For Aws Marketplace +5
12 Oct 202100:00
ptsecurity
[
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7.5.0"
      },
      {
        "status": "affected",
        "version": "7.5.1"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7.8.0"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7.9.0"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server - Community Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.8.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server - Developer Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.9.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for AWS Marketplace",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.9.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.9.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for Microsoft Azure",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7.8.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation