Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2020-27146

TIBCO iProcess Workspace Browser CSRF

Description

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A successful attack using this vulnerability requires human interaction from an authenticated user other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser): versions 11.6.0 and below.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO iProcess Workspace (Browser)

  • unspecified to ≤ 11.6.0affected

References