Introducing the all-new TIBCO Community site!

For current users, please click "Sign In" to reset your password and access the enhanced features. If you're a first-time visitor, we extend a warm welcome—click "Sign Up" to become a part of the TIBCO Community!

If you're seeking alternative community sites, explore ibi, Jaspersoft, and Spotfire.

Jump to content
  • TIBCO Security Advisory: March 12, 2024 - TIBCO ActiveSpaces - CVE-2024-1137


    TIBCO ActiveSpaces Information Leak Vulnerability

      Original release date: March 12, 2024
      Last revised: ---
      Source: TIBCO Software Inc.

    Products Affected

      TIBCO ActiveSpaces - Enterprise Edition versions 4.4.0 through 4.9.0

      The following components are affected:

        * Proxy
        * Client


      The components listed above contain a vulnerability that theoretically allows
      an Active Spaces client to passively observe data traffic to other clients.


      This impact of this vulnerability includes the theoretical possibility of
      bypassing table access controls.  The attacker cannot actively make queries,
      but may observe the results of queries by other clients, even though the
      attacker does not have permission to access that data.

      CVSS v3.1 Base Score: 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)


      TIBCO has released updated versions of the affected systems which address this

      TIBCO ActiveSpaces - Enterprise Edition versions 4.4.0 through 4.9.0: update
        to version 4.9.1 or later



  • Create New...