CVE-2018-12416: TIBCO DataSynapse GridServer Manager Component Vulnerable to Cross-Site Request Forgery
First published: Tue Nov 13 2018(Updated: )
The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer Manager: versions up to and including 5.2.0; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; 6.2.0; 6.3.0.
Credit: security@tibco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO DataSynapse GridServer Manager | <=5.2.0 | |
| TIBCO DataSynapse GridServer Manager | =6.0.0 | |
| TIBCO DataSynapse GridServer Manager | =6.0.1 | |
| TIBCO DataSynapse GridServer Manager | =6.0.2 | |
| TIBCO DataSynapse GridServer Manager | =6.1.0 | |
| TIBCO DataSynapse GridServer Manager | =6.1.1 | |
| TIBCO DataSynapse GridServer Manager | =6.2.0 | |
| TIBCO DataSynapse GridServer Manager | =6.3.0 |
Remedy
TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions: TIBCO DataSynapse GridServer Manager versions 5.2.0 and below update to version 5.2.1 or higher TIBCO DataSynapse GridServer Manager versions 6.0.x, 6.1.x, 6.2.x, and 6.3.0 update to version 6.3.1 or higher
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/author
- agent/severity
- agent/remedy
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/tibco
- canonical/tibco datasynapse gridserver manager
- version/tibco datasynapse gridserver manager/5.2.0
- version/tibco datasynapse gridserver manager/6.0.0
- version/tibco datasynapse gridserver manager/6.0.1
- version/tibco datasynapse gridserver manager/6.0.2
- version/tibco datasynapse gridserver manager/6.1.0
- version/tibco datasynapse gridserver manager/6.1.1
- version/tibco datasynapse gridserver manager/6.2.0
- version/tibco datasynapse gridserver manager/6.3.0