CVE-2012-0687

13.03.2012, 10:55

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.

Severity

UNKNOWN

AV:N/AC:L/Au:N/C:P/I:N/A:N

Atk. Vector

NETWORK

Atk. Complexity

LOW

Base Score

CVSS 3.x

EPSS Score

Percentile: 76%

Vendor	Product	Version
tibco	activematrix_service_bus	2.0.0
tibco	activematrix_service_bus	2.0.1
tibco	activematrix_service_bus	2.0.2
tibco	activematrix_service_bus	2.1.0
tibco	activematrix_service_bus	2.2.0
tibco	activematrix_service_bus	2.2.1
tibco	activematrix_service_bus	2.3.0
tibco	activematrix_service_bus	2.3.1
tibco	activematrix_service_bus	3.0.0
tibco	activematrix_service_bus	3.0.1
tibco	activematrix_service_grid	2.0.0
tibco	activematrix_service_grid	2.0.1
tibco	activematrix_service_grid	2.1.0
tibco	activematrix_service_grid	2.2.0
tibco	activematrix_service_grid	2.2.1
tibco	activematrix_service_grid	2.3.0
tibco	activematrix_service_grid	2.3.1
tibco	activematrix_service_grid	2.3.2
tibco	activematrix_service_grid	3.0.0
tibco	activematrix_service_grid	3.0.1
tibco	activematrix_service_grid	3.1.0
tibco	activematrix_service_grid	3.1.2
tibco	activematrix_businessworks_service_engine	𝑥 ≤ 5.8.1
tibco	activematrix_businessworks_service_engine	5.6.0
tibco	activematrix_businessworks_service_engine	5.6.3
tibco	activematrix_businessworks_service_engine	5.6.4
tibco	activematrix_businessworks_service_engine	5.7
tibco	activematrix_businessworks_service_engine	5.7.1
tibco	activematrix_businessworks_service_engine	5.7.2
tibco	activematrix_businessworks_service_engine	5.8
tibco	activematrix_businessworks_service_engine	5.9.0
tibco	activematrix_businessworks_service_engine	5.9.1
tibco	activematrix_businessworks_service_engine	5.9.2
tibco	silver_fabric_activematrix_service_grid_distribution	3.1.3
tibco	silver_fabric_activematrix_service_grid_distribution	5.9.2
tibco	activematrix_bpm	𝑥 ≤ 1.2.0
tibco	activematrix_bpm	1.0.1
tibco	activematrix_bpm	1.0.2
tibco	activematrix_bpm	1.1.0
tibco	activematrix_bpm	1.1.1
tibco	businessevents	3.0
tibco	businessevents	3.0
tibco	businessevents	3.0.1
tibco	businessevents	3.0.2
tibco	businessevents	3.0.2
tibco	businessevents	4.0
tibco	businessevents	4.0.1
tibco	businessevents	5.0
tibco	businessevents	5.0
tibco	activematrix_businessworks	𝑥 ≤ 5.9.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

http://www.tibco.com/multimedia/activematrix2_advisory_20120308_tcm8-15726.txt

http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt

http://www.tibco.com/multimedia/businessevents_advisory_20120308_tcm8-15729.txt

http://www.tibco.com/multimedia/businessworks_advisory_20120308_tcm8-15730.txt

http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp

http://www.tibco.com/multimedia/activematrix2_advisory_20120308_tcm8-15726.txt

http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt

http://www.tibco.com/multimedia/businessevents_advisory_20120308_tcm8-15729.txt

http://www.tibco.com/multimedia/businessworks_advisory_20120308_tcm8-15730.txt

http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp