CVE-2018-12412
The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - security@tibco.com
- Published
- 2018-11-06
- Last modified
- 2024-09-17
- Weaknesses
- CWE-352
Affected products
- Ftl (Tibco)
- Tibco Ftl - Community Edition (Tibco Software Inc.)
- Tibco Ftl - Developer Edition (Tibco Software Inc.)
- Tibco Ftl - Enterprise Edition (Tibco Software Inc.)
References
- http://www.securityfocus.com/bid/105861
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-ftl
