Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-30572 EUVD-2022-52421GHSA-5fpr-xm52-cxqh

TIBCO iWay Service Manager Directory Traversal Vulnerability

Published Aug 2, 2022 · Updated Sep 17, 2024 · Assigned by tibco

Description

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability that allows a low privileged attacker with network access to read arbitrary resources on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO iWay Service Manager unspecified – ≤ 8.0.6 —

References