CoreCVE
Back

HIGH

TIBCO FTL Realm Server Vulnerable to CSRF Attacks

Published Nov 7, 2018

Description

The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0.

Affected products

Remediation

Vendor solution

TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions:

TIBCO FTL - Community Edition versions 5.4.0 and below update to version 5.4.1 or higher TIBCO FTL - Developer Edition versions 5.4.0 and below update to version 5.4.1 or higher TIBCO FTL - Enterprise Edition versions 5.4.0 and below update to version 5.4.1 or higher.

Weaknesses (1)

CWE-352

CSRF

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner tibco
Published Nov 7, 2018
Updated Sep 17, 2024
Reserved Jun 14, 2018
Link CVE-2018-12412
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-12412
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-12412
ENISA EUVD
Assigner tibco
Published Nov 7, 2018
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2018-4386
EUVD-2018-4386