CVE-2022-30570

TIBCO Data Virtualization Access Control Vulnerability

Medium · published July 19, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.5.2 and below and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.2 and below.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00721 · 53.4th percentile
Published
2022-07-19T17:50Z
EPSS history
Timeline
  • 19 JUL 17:50Z
    TIBCO Data Virtualization Access Control Vulnerability
    cvelistv5