medium5.0

CVE-2012-0687

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform…

Impact

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.

Affected products

Vendor	Product	Affected versions
Tibco	Activematrix Service Bus	Versions 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.2.0, 2.2.1
Tibco	Activematrix Service Grid	Versions 2.0.0, 2.0.1, 2.1.0, 2.2.0, 2.2.1, 2.3.0
Tibco	Activematrix Businessworks Service Engine	through 5.8.1 Versions 5.6.0, 5.6.3, 5.6.4, 5.7, 5.7.1
Tibco	Silver Fabric Activematrix Service Grid Distribution	Versions 3.1.3, 5.9.2
Tibco	Activematrix Bpm	through 1.2.0 Versions 1.0.1, 1.0.2, 1.1.0, 1.1.1
Tibco	Businessevents	Versions 3.0, 3.0.1, 3.0.2, 4.0, 4.0.1, 5.0
Tibco	Activematrix Businessworks	through 5.9.2

Weakness classification

CWE-200

Impact

Affected products

Weakness classification

References