CVE-2017-5533

EPSS 1.98%
Veröffentlicht 15.11.2017 21:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

TIBCO JasperReports Server credentials disclosure

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 0 Referenzen 9

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tibco ≫ Jasperreports Server Version 6.4.0

Tibco ≫ Jasperreports Server Version 6.4.0 SwPlatform activematrix_bpm

Tibco ≫ Jasperreports Server Version 6.4.0 SwEdition community

Tibco ≫ Jaspersoft Version 6.4.0 SwPlatform aws_with_multi-tenancy

Tibco ≫ Jaspersoft Reporting And Analytics Version 6.4.0 SwPlatform aws

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.98%	0.78

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
Tibco	9.3	3.9	4.7	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N