TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability
CVE-2023-26219

7.4HIGH

Key Information:

Vendor

Tibco
Status
Tibco Hawk
Tibco Hawk Distribution For Tibco Silver Fabric
Tibco Operational Intelligence Hawk Redtail
Tibco Runtime Agent
Vendor
CVE Published:
25 October 2023

What is CVE-2023-26219?

The Hawk Console and Hawk Agent components from TIBCO Software Inc. contain a vulnerability that may allow an attacker to exploit accessed logs to uncover credentials. This security issue affects several TIBCO products, particularly versions prior to 6.2.2 for TIBCO Hawk and TIBCO Hawk Distribution for TIBCO Silver Fabric, versions below 7.2.1 for TIBCO Operational Intelligence Hawk RedTail, and below 5.12.2 for TIBCO Runtime Agent. Organizations utilizing these affected versions should take immediate action to mitigate risks associated with potential credential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

TIBCO Hawk 0 <= 6.2.2

TIBCO Hawk Distribution for TIBCO Silver Fabric 0 <= 6.2.2

TIBCO Operational Intelligence Hawk RedTail 0 <= 7.2.1

References

https://www.tibco.com/services/support/advisories

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.