CVE-2012-0689 — Sensitive Information Exposure in Activematrix BPM

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.2%
top 53.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Tibco Activematrix BPMTibco Activematrix Businessworks Service EngineTibco Activematrix Service BUS+2 more
Timeline
PublishedMar 13
Latest updateMay 17

Description

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶NVDtibco/activematrix_service_grid3.0.0, 3.0.1, 3.1.0+2
▶NVDtibco/activematrix_service_bus3.0.0, 3.0.1+1
▶NVDtibco/activematrix_bpm1.0.1, 1.0.2+1

🔴Vulnerability Details

2
GHSA
GHSA-prrp-2qjv-p8fm: The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3↗2022-05-17
▶
CVEList
CVE-2012-0689: The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3↗2012-03-13
▶
CVE-2012-0689 — Sensitive Information Exposure | cvebase