CVE-2018-12414: TIBCO Rendezvous Vulnerable to CSRF Attacks

Published Nov 6, 2018
·
Updated

The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer Edition, TIBCO Rendezvous for z/Linux, TIBCO Rendezvous for z/OS, TIBCO Rendezvous Network Server, TIBCO Substation ES contain vulnerabilities which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions up to and including 8.4.5, TIBCO Rendezvous Developer Edition: versions up to and including 8.4.5, TIBCO Rendezvous for z/Linux: versions up to and including 8.4.5, TIBCO Rendezvous for z/OS: versions up to and including 8.4.5, TIBCO Rendezvous Network Server: versions up to and including 1.1.2, and TIBCO Substation ES: versions up to and including 2.12.2.

Affected Software

6 affected components
TIBCO Rendezvous<=8.4.5
TIBCO Rendezvous<=8.4.5
TIBCO Rendezvous For Z\/linux<=8.4.5
TIBCO Rendezvous For Z\/os<=8.4.5
TIBCO Rendezvous Network Server<=1.1.2
TIBCO Substation ES<=2.12.0

Remediation

Information

TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions: TIBCO Rendezvous versions 8.4.5 and below update to version 8.4.6 or higher TIBCO Rendezvous Developer Edition versions 8.4.5 and below update to version 8.4.6 or higher TIBCO Rendezvous for z/Linux versions 8.4.5 and below update to version 8.4.6 or higher TIBCO Rendezvous for z/OS versions 8.4.5 and below update to version 8.4.6 or higher TIBCO Rendezvous Network Server versions 1.1.2 and below update to version 1.1.3 or higher TIBCO Substation ES versions 2.12.0 and below update to version 2.12.1 or higher

Event History

Nov 6, 2018
CVE Published
11:29 PM
Nov 7, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
RemedyDescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2018-12414?

CVE-2018-12414 has been classified as a high severity vulnerability.

2

How do I fix CVE-2018-12414?

To fix CVE-2018-12414, update TIBCO Rendezvous to version 8.4.6 or later.

3

What components are affected by CVE-2018-12414?

CVE-2018-12414 affects TIBCO Rendezvous, Rendezvous Secure Routing Daemon, Rendezvous Cache, and other TIBCO components.

4

Is my version vulnerable to CVE-2018-12414?

If you are using TIBCO Rendezvous versions up to and including 8.4.5, you are vulnerable to CVE-2018-12414.

5

What are the potential impacts of CVE-2018-12414?

Exploitation of CVE-2018-12414 may lead to unauthorized access and potential data breaches.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203