CVE-2018-5433 Vulnerability Details

  /     /     /  

CVE-2018-5433 Metadata Quick Info

CVE Published: 13/06/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: tibco | Vendor: TIBCO Software Inc. | Product: TIBCO Administrator - Enterprise Edition
Status : PUBLISHED

---

CVE-2018-5433 Description

The TIBCO Administrator server component of TIBCO Software Inc.\'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.\'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: The impact of the vulnerability includes the theoretical possibility of disclosing contents of files on the host machine that are accessible to the system account used to run the affected component.
Source: TIBCO Software Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).