CVE-2024-4576 TIBCO EBX File Inclusion Vulnerability

2024-06-1306:31:41

tibco

github.com

tibco

file inclusion

vulnerability

traverse directories

sensitive files

unauthorized disclosure

system configuration

sensitive information

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

17.8%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information.

CNA Affected

[
  {
    "vendor": "Tibco",
    "product": "EBX",
    "versions": [
      {
        "status": "affected",
        "version": "5",
        "versionType": "patch",
        "lessThanOrEqual": "9.25"
      },
      {
        "status": "affected",
        "version": "6",
        "versionType": "hotfix",
        "lessThanOrEqual": "1.3 HF2"
      }
    ],
    "defaultStatus": "unaffected"
  }
]