CVE-2017-5530high

CVE-2017-5530: high-severity vulnerability in TIBCO Software Inc. tibbr Community

SAML protocol handling errors in tibbr

Published · Updated

Follow this CVE+ Monitor tibbr Community+ Monitor tibbr Enterprise

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.9%
The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products
TIBCO Software Inc. · tibbr CommunityTIBCO Software Inc. · tibbr Enterprise
Related CVEs — TIBCO Software Inc. tibbr Community

In the same product, most dangerous first.

CVE-2017-5534HIGHImproper sandboxing of a third-party component in tibbrEPSS 1.3%