Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2017-5530

SAML protocol handling errors in tibbr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. tibbr Community

  • 5.2.1 and belowaffected
  • 6.0.0affected
  • 6.0.1affected
  • 7.0.0affected

TIBCO Software Inc. tibbr Enterprise

  • 5.2.1 and belowaffected
  • 6.0.0affected
  • 6.0.1affected
  • 7.0.0affected

References