CVE-2022-41559

Summary

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.

Affected Software

Weaknesses

• Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user.

ADP Enrichment

CVE Program Container

Additional References

• https://www.tibco.com/services/support/advisories

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.tibco.com/services/support/advisories

• ←Previous
• Next→