The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Runtime Agent, TIBCO Runtime Agent, TIBCO Runtime Agent for z/Linux, and TIBCO Runtime Agent for z/Linux contains an easily exploitable vulnerability that allows an unauthenticated attacker to social engineer a legitimate user with network access to execute a Stored XSS attack targeting the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1, TIBCO Runtime Agent: versions 5.10.2 and below, TIBCO Runtime Agent: versions 5.11.0 and 5.11.1, TIBCO Runtime Agent for z/Linux: versions 5.10.2 and below, and TIBCO Runtime Agent for z/Linux: versions 5.11.0 and 5.11.1.
References
Link | Resource |
---|---|
http://www.tibco.com/services/support/advisories | Vendor Advisory |
https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28827 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Apr 2021, 20:05
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\/linux:*:* cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:z\/linux:*:* cpe:2.3:a:tibco:runtime_agent:5.11.0:*:*:*:*:*:*:* cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:* cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\/linux:*:* cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:* cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:* cpe:2.3:a:tibco:runtime_agent:5.11.0:*:*:*:*:z\/linux:*:* cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:* cpe:2.3:a:tibco:runtime_agent:5.11.1:*:*:*:*:z\/linux:*:* cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:* cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:* cpe:2.3:a:tibco:runtime_agent:5.11.1:*:*:*:*:*:*:* cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:* cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\/linux:*:* |
|
CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 9.6 |
References | (CONFIRM) http://www.tibco.com/services/support/advisories - Vendor Advisory | |
References | (CONFIRM) https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28827 - Vendor Advisory | |
CWE | CWE-79 |
20 Apr 2021, 20:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-20 19:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-28827
Mitre link : CVE-2021-28827
CVE.ORG link : CVE-2021-28827
JSON object : View
Products Affected
tibco
- runtime_agent
- administrator
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')