Skip to content
OpenAdvisories
High · 7.5 CVE-2018-12415 EUVD-2018-4389GHSA-wch7-4w8f-vg94

TIBCO Enterprise Message Service Vulnerable to CSRF Attacks

Published Nov 7, 2018 · Updated Sep 16, 2024 · Assigned by tibco

Description

The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.4.0 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.4.0 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.4.0 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO Enterprise Message Service 8.4.0 and previous —
TIBCO Software TIBCO Enterprise Message Service - Community Edition 8.4.0 and previous —
TIBCO Software TIBCO Enterprise Message Service - Developer Edition 8.4.0 and previous —

References