Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2018-5433

XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Administrator - Enterprise Edition

  • unspecified to ≤ 5.10.0affected

TIBCO Software Inc. TIBCO Administrator - Enterprise Edition for z/Linux

  • unspecified to ≤ 5.9.1affected

References