CVE-2021-28828: TIBCO Administrator SQL injection vulnerability

Q: What is CVE-2021-28828?

CVE-2021-28828 is a vulnerability found in the Administration GUI component of TIBCO Administrator - Enterprise Edition.

Q: How does CVE-2021-28828 affect TIBCO Administrator?

CVE-2021-28828 affects TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, and TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric on z/Linux.

Q: What is the severity of CVE-2021-28828?

CVE-2021-28828 has a severity rating of 8.8 (high).

Q: How can I fix CVE-2021-28828?

To fix CVE-2021-28828, upgrade to TIBCO Administrator 5.11.2 or later.

Q: Where can I find more information about CVE-2021-28828?

More information about CVE-2021-28828 can be found on the official TIBCO support website and advisory page.

Published Apr 20, 2021

Updated

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a SQL injection attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, and TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1.

Affected Software

9 affected components

TIBCO Administrator<=5.10.2

TIBCO Administrator Silver Fabric<=5.10.2

TIBCO Administrator Z\/linux<=5.10.2

TIBCO Administrator=5.11.0

TIBCO Administrator Silver Fabric=5.11.0

TIBCO Administrator Z\/linux=5.11.0

TIBCO Administrator=5.11.1

TIBCO Administrator Silver Fabric=5.11.1

TIBCO Administrator Z\/linux=5.11.1

Remediation

Information

TIBCO has released updated versions of the affected components which address these issues. TIBCO Administrator - Enterprise Edition versions 5.10.2 and below update to version 5.10.3 or higher TIBCO Administrator - Enterprise Edition versions 5.11.0 and 5.11.1 update to version 5.11.2 or higher TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric versions 5.10.2 and below update to version 5.10.3 or higher TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric versions 5.11.0 and 5.11.1 update to version 5.11.2 or higher TIBCO Administrator - Enterprise Edition for z/Linux versions 5.10.2 and below update to version 5.10.3 or higher TIBCO Administrator - Enterprise Edition for z/Linux versions 5.11.0 and 5.11.1 update to version 5.11.2 or higher

Event History

Apr 20, 2021

CVE Published

via MITRE·06:30 PM

Data Sourced

via MITRE·06:30 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-28828?

CVE-2021-28828 is a vulnerability found in the Administration GUI component of TIBCO Administrator - Enterprise Edition.

How does CVE-2021-28828 affect TIBCO Administrator?

CVE-2021-28828 affects TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, and TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric on z/Linux.

What is the severity of CVE-2021-28828?