CVE-2022-30570
TIBCO Data Virtualization Access Control Vulnerability
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.5.2 and below and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.2 and below.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
TIBCO Software Inc. · TIBCO Data VirtualizationTIBCO Software Inc. · TIBCO Data Virtualization for AWS MarketplaceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →