CVE-2018-12416

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-12416
The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer Manager: versions up to and including 5.2.0; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; 6.2.0; 6.3.0.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H

Exploitability : 1.6 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/105913 Third Party Advisory VDB Entry
https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-13-2018-tibco-datasynapse-gridserver-manager Vendor Advisory
http://www.securityfocus.com/bid/105913 Third Party Advisory VDB Entry
https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-13-2018-tibco-datasynapse-gridserver-manager Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:tibco:datasynapse_gridserver_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.3.0:*:*:*:*:*:*:*
History

21 Nov 2024, 03:45

Type Values Removed Values Added
CVSS v2 : 6.8
v3 : 8.8 		v2 : 6.8
v3 : 7.1
References () http://www.securityfocus.com/bid/105913 - VDB Entry, Third Party Advisory () http://www.securityfocus.com/bid/105913 - Third Party Advisory, VDB Entry
References () https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-13-2018-tibco-datasynapse-gridserver-manager - Vendor Advisory () https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-13-2018-tibco-datasynapse-gridserver-manager - Vendor Advisory
Information

Published : 2018-11-13 19:29

Updated : 2024-11-21 03:45

NVD link : CVE-2018-12416

Mitre link : CVE-2018-12416

CVE.ORG link : CVE-2018-12416

JSON object : View

Products Affected

tibco

  • datasynapse_gridserver_manager
CWE
CWE-352

Cross-Site Request Forgery (CSRF)