CVE-2018-5428: TIBCO Data Virtualization Command Injection Vulnerability
The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TIBCO Data Virtualizationto a version that resolves this vulnerability.Fixed in 7.0.7 - Upgrade
Upgrade
TIBCO Data Virtualization version control adapters (formerly Cisco Information Server)to a version that resolves this vulnerability.Fixed in 7.0.7
Event History
Frequently Asked Questions
What is CVE-2018-5428?
CVE-2018-5428 is a vulnerability in the version control adapters component of TIBCO Data Virtualization that allows for arbitrary command execution.
What is the severity of CVE-2018-5428?
The severity of CVE-2018-5428 is critical with a CVSS score of 8.8.
Which version of TIBCO Data Virtualization is affected by CVE-2018-5428?
TIBCO Data Virtualization versions 7.0.5 and 7.0.6 are affected by CVE-2018-5428.
How can I fix CVE-2018-5428?
To fix CVE-2018-5428, it is recommended to update TIBCO Data Virtualization to a version that is not affected by the vulnerability.
Where can I find more information about CVE-2018-5428?
More information about CVE-2018-5428 can be found at the following references: - [http://www.securityfocus.com/bid/104518](http://www.securityfocus.com/bid/104518) - [https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-20-2018-tibco-data-virtualization](https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-20-2018-tibco-data-virtualization)