CVE-2024-4576 TIBCO EBX File Inclusion Vulnerability

2024-06-1306:31:41

tibco

www.cve.org

tibco

ebx

file inclusion

vulnerability

cve-2024-4576

system configuration

sensitive information

unauthorized disclosure

EPSS

0.001

Percentile

17.8%

JSON

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "EBX",
    "vendor": "Tibco",
    "versions": [
      {
        "lessThanOrEqual": "9.25",
        "status": "affected",
        "version": "5",
        "versionType": "patch"
      },
      {
        "lessThanOrEqual": "1.3 HF2",
        "status": "affected",
        "version": "6",
        "versionType": "hotfix"
      }
    ]
  }
]

References

community.tibco.com/advisories/tibco-security-advisory-june-11-2024-tibco-ebx-cve-2024-4576-r215/

EPSS

0.001

Percentile

17.8%

JSON

Related for CVELIST:CVE-2024-4576