CVE-2022-22778

Description

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute Cross-Site Request Forgery (CSRF) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below.

Reserved 2022-01-07 | Published 2022-05-18 | Updated 2024-09-16 | Assigner tibco

Problem types

In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system.

Product status

Any version
affected

References

www.tibco.com/services/support/advisories

www.tibco.com/...sory-may-18-2022-tibco-bctcm-cve-2022-22778

cve.org (CVE-2022-22778)

nvd.nist.gov (CVE-2022-22778)

Download JSON