Vulnerability Description
The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user must be authenticated and have privileges required to monitor the server in an operational capacity. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 7.0.8 and below, versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 and TIBCO Data Virtualization for AWS Marketplace: versions 8.2.0 and below.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tibco | Data Virtualization | <= 7.0.8 |
| Tibco | Data Virtualization For Aws Marketplace | <= 8.2.0 |
References
- http://www.tibco.com/services/support/advisoriesVendor Advisory
- https://www.tibco.com/support/advisories/2020/08/tibco-security-advisory-august-Vendor Advisory
- http://www.tibco.com/services/support/advisoriesVendor Advisory
- https://www.tibco.com/support/advisories/2020/08/tibco-security-advisory-august-Vendor Advisory
FAQ
What is CVE-2020-9415?
CVE-2020-9415 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a...
How severe is CVE-2020-9415?
CVE-2020-9415 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9415?
Check the references section above for vendor advisories and patch information. Affected products include: Tibco Data Virtualization, Tibco Data Virtualization For Aws Marketplace.