CVE-2017-5536: TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks
First published: Tue May 01 2018(Updated: )
The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.
Credit: security@tibco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO DataSynapse GridServer Manager | <=5.1.3 | |
| TIBCO DataSynapse GridServer Manager | =6.0.0 | |
| TIBCO DataSynapse GridServer Manager | =6.0.1 | |
| TIBCO DataSynapse GridServer Manager | =6.0.2 | |
| TIBCO DataSynapse GridServer Manager | =6.1.0 | |
| TIBCO DataSynapse GridServer Manager | =6.1.1 | |
| TIBCO DataSynapse GridServer Manager | =6.2.0 |
Remedy
TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions: TIBCO DataSynapse GridServer Manager versions 5.1.3 and below update to version 5.2.0 or higher TIBCO DataSynapse GridServer Manager versions 6.0.0, 6.0.1, and 6.0.2 update to version 6.3.0 or higher TIBCO DataSynapse GridServer Manager versions 6.1.0, and 6.1.1 update to version 6.3.0 or higher TIBCO DataSynapse GridServer Manager version 6.2.0 update to version 6.3.0 or higher
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/title
- agent/severity
- agent/tags
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- vendor/tibco
- canonical/tibco datasynapse gridserver manager
- version/tibco datasynapse gridserver manager/5.1.3
- version/tibco datasynapse gridserver manager/6.0.0
- version/tibco datasynapse gridserver manager/6.0.1
- version/tibco datasynapse gridserver manager/6.0.2
- version/tibco datasynapse gridserver manager/6.1.0
- version/tibco datasynapse gridserver manager/6.1.1
- version/tibco datasynapse gridserver manager/6.2.0