Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-1137 EUVD-2024-16909GHSA-crf3-v2gr-xr72

TIBCO ActiveSpaces Information Leak Vulnerability

Published Mar 12, 2024 · Updated Oct 31, 2024 · Assigned by tibco

Description

The Proxy and Client components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise Edition contain a vulnerability that theoretically allows an Active Spaces client to passively observe data traffic to other clients. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise Edition: versions 4.4.0 through 4.9.0.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO ActiveSpaces - Enterprise Edition 4.4.0 – ≤ 4.9.0 —

References