CVE-2018-12412
High
Description
The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTibco Ftl
PublishedNov 6, 2018
First seenNov 6, 2018
How to fix
Update
- tibco ftl5.4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco ftl | 1.0.0 ≤ v < 5.4.0 | 5.4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.