Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2018-12416

TIBCO DataSynapse GridServer Manager Component Vulnerable to Cross-Site Request Forgery

Description

The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer Manager: versions up to and including 5.2.0; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; 6.2.0; 6.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO DataSynapse GridServer Manager

  • unspecified to ≤ 5.2.0affected
  • 6.0.0affected
  • 6.0.1affected
  • 6.0.2affected
  • 6.1.0affected
  • 6.1.1affected
  • 6.2.0affected
  • 6.3.0affected

References