TIBCO released a security advisory for BW, is there any impact on BW 5.x due to this

[Harish Yadav]

TIBCO just released the security advisory for business works.

https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory...

is there any impact on BW 5.x due to this

-------------------------------------------------------------------------------------------------------------------------

Systems Affected

 

TIBCO ActiveMatrix BusinessWorks versions 6.4.2 and below

 

The following component is affected:

 

HTTP Connector

 

Description

 

The component listed above contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the BusinessWorks engine even when authentication is required. This possibility is restricted to circumstances where HTTP "Basic Authentication" policy is used in conjunction with an XML Authentication resource. The BusinessWorks engine might instead use credentials from a prior HTTP request for authorization purposes.

 

------------------------------------------------------------------------------------------------------------------------

Thanks,

Harry