CVE-2021-35495 — Insufficiently Protected Credentials in Software INC Tibco Jasperreports Server

CWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
8.8HIGHNVD
CNA9.0
EPSS
0.4%
top 42.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Tibco Software INC Tibco Jasperreports ServerTibco Software INC Tibco Jasperreports Server Community EditionTibco Software INC Tibco Jasperreports Server Developer Edition+4 more
Timeline
PublishedOct 12
Latest updateMay 24

Description

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows an authenticated attacker w…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages7 packages

🔴Vulnerability Details

2
GHSA
GHSA-q7gp-x3qj-q4v2: The Scheduler Connection component of TIBCO Software Inc↗2022-05-24
▶
CVEList
TIBCO JasperReports FTP Password exposed↗2021-10-12
▶