CVE-2023-26219

published 2023-10-25

CVE-2023-26219: The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence…

Priority P3 50 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and Agent’s log to obtain credentials used to access associated EMS servers. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.2.2 and below, TIBCO Hawk Distribution for TIBCO Silver Fabric: versions 6.2.2 and below, TIBCO Operational Intelligence Hawk RedTail: versions 7.2.1 and below, and TIBCO Runtime Agent: versions 5.12.2 and below.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
tibco	hawk	< 6.2.3	6.2.3
tibco	hawk_distribution_for_tibco_silver_fabric	< 6.2.3	6.2.3
tibco	operational_intelligence_hawk_redtail	< 7.2.2	7.2.2
tibco	runtime_agent	< 5.12.3	5.12.3
tibco_software_inc	tibco_hawk	<= 6.2.2	—
tibco_software_inc	tibco_hawk_distribution_for_tibco_silver_fabric	<= 6.2.2	—
tibco_software_inc	tibco_operational_intelligence_hawk_redtail	<= 7.2.1	—
tibco_software_inc	tibco_runtime_agent	<= 5.12.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-798