CVE-2024-3182 — Sensitive Information Exposure in Hawk

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 68.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tibco Hawk
Timeline
PublishedMay 15

Description

Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service (EMS) password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NExploitability: 2.0 | Impact: 4.0

Affected Packages1 packages

▶CVEListV5tibco/hawk6.2.0 — 6.2.4

🔴Vulnerability Details

2
GHSA
GHSA-hxv9-64g4-jhvj: Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6↗2024-05-15
▶
CVEList
CVE-2024-3182: Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6↗2024-05-15
▶
CVE-2024-3182 — Sensitive Information Exposure in Hawk | cvebase