Vulnerability in Tibco Data Virtualization
CVE-2022-30570
The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.5.2 and below and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.2 and below.
EPSS: 0.007 (48.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Tibco Data_virtualization
- Tibco Data_virtualization_for_aws_marketplace
- Tibco Software Inc. Data Virtualization — versions unspecified
- Tibco Software Inc. Data Virtualization For Aws Marketplace — versions unspecified
References
- security@tibco.com (x_refsource_CONFIRM, Vendor Advisory)
- security@tibco.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-30570?
- CVE-2022-30570 is a medium-severity vulnerability in Tibco Data Virtualization. CVSS score: 6.5/10. Published 2022-07-19.
- How severe is CVE-2022-30570?
- Medium severity. CVSS v3 base score is 6.5 out of 10.