CVE-2019-11208: falha de média gravidade em TIBCO API Exchange Gateway
TIBCO API Exchange Processes OAuth Incorrectly
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar TIBCO API Exchange Gateway+ Monitorar TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 0.9%
The authorization component of TIBCO Software Inc.'s TIBCO API Exchange Gateway, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically processes OAuth authorization incorrectly, leading to potential escalation of privileges for the specific customer endpoint, when the implementation uses multiple scopes. This issue affects: TIBCO Software Inc.'s TIBCO API Exchange Gateway version 2.3.1 and prior versions, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric version 2.3.1 and prior versions.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
TIBCO Software Inc. · TIBCO API Exchange GatewayTIBCO Software Inc. · TIBCO API Exchange Gateway Distribution for TIBCO Silver FabricCVEs relacionadas — TIBCO API Exchange Gateway
No mesmo produto, das mais perigosas para as menos.