CVE-2011-2021: Medium severity tibco iprocess engine vulnerability
Published May 20, 2011
·Updated
Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
Affected Software
20 affected components
TIBCO iProcess Engine<=11.1.2
TIBCO iProcess Engine=10.3.0
TIBCO iProcess Engine=10.3.1
TIBCO iProcess Engine=10.3.2
TIBCO iProcess Engine=10.3.3
TIBCO iProcess Engine=10.3.4
TIBCO iProcess Engine=10.3.5
TIBCO iProcess Engine=10.4
TIBCO iProcess Engine=10.4.1
TIBCO iProcess Engine=10.5
TIBCO iProcess Engine=10.6
TIBCO iProcess Engine=10.6.0
TIBCO iProcess Engine=10.6.1
TIBCO iProcess Engine=10.6.2
TIBCO iProcess Engine=11.0
TIBCO iProcess Engine=11.1.1
TIBCO iProcess Workspace<=11.3
TIBCO iProcess Workspace=11.0
TIBCO iProcess Workspace=11.1
TIBCO iProcess Workspace=11.2
Event History
May 20, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2021?
CVE-2011-2021 is considered a moderate severity vulnerability due to its potential for session hijacking.
2
How do I fix CVE-2011-2021?
To fix CVE-2011-2021, ensure that you upgrade to TIBCO iProcess Engine version 11.1.3 or higher and TIBCO iProcess Workspace version 11.3.1 or higher.
3
What types of attacks can exploit CVE-2011-2021?
CVE-2011-2021 can be exploited by attackers to hijack user sessions through session fixation techniques.
4
Which versions of TIBCO iProcess Engine are affected by CVE-2011-2021?
CVE-2011-2021 affects TIBCO iProcess Engine versions 10.3.0 to 11.1.2, including 10.5, 10.6, and 11.0.
5
Is TIBCO iProcess Workspace vulnerable to CVE-2011-2021?
Yes, TIBCO iProcess Workspace versions up to 11.3 are also vulnerable to CVE-2011-2021.