CVE-2012-0687: Infoleak
TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0687?
CVE-2012-0687 has been classified as a medium severity vulnerability.
How do I fix CVE-2012-0687?
To fix CVE-2012-0687, upgrade to the versions of TIBCO ActiveMatrix Runtime Platform that are 2.3.2 or later for Service Grid and Service Bus, and 5.8.2 or later for BusinessWorks Service Engine.
What types of TIBCO software are affected by CVE-2012-0687?
CVE-2012-0687 affects TIBCO ActiveMatrix Service Bus, ActiveMatrix Service Grid, and BusinessWorks Service Engine versions prior to specified updates.
Is CVE-2012-0687 an exploitable vulnerability?
Yes, CVE-2012-0687 can be exploited by attackers if the affected versions are running in a vulnerable state.
When was CVE-2012-0687 published?
CVE-2012-0687 was published on March 8, 2012.