Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2018-12412

TIBCO FTL Realm Server Vulnerable to CSRF Attacks

Description

The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO FTL - Community Edition

  • unspecified to ≤ 5.4.0affected

TIBCO Software Inc. TIBCO FTL - Developer Edition

  • unspecified to ≤ 5.4.0affected

TIBCO Software Inc. TIBCO FTL - Enterprise Edition

  • unspecified to ≤ 5.4.0affected

References