Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2018-5434

XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Runtime Agent: versions up to and including 5.10.0, and TIBCO Runtime Agent for z/Linux: versions up to and including 5.9.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Runtime Agent

  • unspecified to ≤ 5.10.0affected

TIBCO Software Inc. TIBCO Runtime Agent for z/Linux

  • unspecified to ≤ 5.9.1affected

References