Vulnerability Description
The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tibco | Tibbr | <= 5.2.1 |
References
- https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-decembeVendor Advisory
- https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-decembeVendor Advisory
FAQ
What is CVE-2017-5530?
CVE-2017-5530 is a vulnerability with a CVSS score of 8.1 (HIGH). The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their...
How severe is CVE-2017-5530?
CVE-2017-5530 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-5530?
Check the references section above for vendor advisories and patch information. Affected products include: Tibco Tibbr.