TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks
CVE-2017-5536

6.3MEDIUM

Key Information:

Vendor

Tibco
Status
Tibco Datasynapse Gridserver Manager
Vendor
CVE Published:
1 May 2018

What is CVE-2017-5536?

The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

Affected Version(s)

TIBCO DataSynapse GridServer Manager <= 5.1.3

TIBCO DataSynapse GridServer Manager 6.0.0

TIBCO DataSynapse GridServer Manager 6.0.1

References

https://www.tibco.com/support/advisories/2018/05/security...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.