CVE-2014-2075 — Improper Authentication in Enterprise Administrator

CWE-287 — Improper Authentication3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
2.5%
top 14.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tibco Enterprise AdministratorTibco Enterprise Administrator SDK
Timeline
PublishedFeb 27
Latest updateMay 17

Description

TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication requirements, which allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-h6xq-vr98-wvhw: TIBCO Enterprise Administrator 1↗2022-05-17
▶
CVEList
CVE-2014-2075: TIBCO Enterprise Administrator 1↗2014-02-27
▶
CVE-2014-2075 — Improper Authentication | cvebase