CVE-2022-41564

published 2023-02-14

CVE-2022-41564: The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the…

Priority P3 35 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0 through 6.2.1 and TIBCO Operational Intelligence Hawk RedTail: versions 7.0.0 through 7.2.0.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
tibco	hawk	>= 6.1.0 < 6.2.2	6.2.2
tibco	operational_intelligence_hawk_redtail	>= 7.0.0 < 7.2.1	7.2.1
tibco_software_inc	tibco_hawk	unspecified – 6.2.1	—
tibco_software_inc	tibco_operational_intelligence_hawk_redtail	unspecified – 7.2.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-522