Vulnerability-Lookup

CNVD-2018-13980

Vulnerability from cnvd - Published: 2018-07-26

Title

TIBCO DataSynapse GridServer Manager GridServer Broker、GridServer Driver和GridServer Engine组件服务器加密使用不当漏洞

Description

TIBCO DataSynapse GridServer Manager是美国TIBCO软件公司的一套用于管理GridServer环境的管理系统。GridServer Broker是其中的一个工作负载管理组件；GridServer Driver是其中的一个驱动程序组件；GridServer Engine是其中的一个GridServer引擎组件。 TIBCO DataSynapse GridServer Manager中的GridServer Broker、GridServer Driver和GridServer Engine组件存在安全漏洞，该漏洞源于程序使用了错误的加密机制及弱密码。攻击者可利用该漏洞控制组件之间的流量。

Severity

中

Patch Name

TIBCO DataSynapse GridServer Manager GridServer Broker、GridServer Driver和GridServer Engine组件服务器加密使用不当漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535

Reference

https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535

Impacted products

Name
['TIBCO DataSynapse GridServer Manager 6.2.0', 'TIBCO DataSynapse GridServer Manager 6.1.1', 'TIBCO DataSynapse GridServer Manager 6.1.0', 'TIBCO DataSynapse GridServer Manager 6.0.2', 'TIBCO DataSynapse GridServer Manager 6.0.1', 'TIBCO DataSynapse GridServer Manager 6.0.0', 'TIBCO DataSynapse GridServer Manager <5.1.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-5535",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5535"
    }
  },
  "description": "TIBCO DataSynapse GridServer Manager\u662f\u7f8e\u56fdTIBCO\u8f6f\u4ef6\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8e\u7ba1\u7406GridServer\u73af\u5883\u7684\u7ba1\u7406\u7cfb\u7edf\u3002GridServer Broker\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u5de5\u4f5c\u8d1f\u8f7d\u7ba1\u7406\u7ec4\u4ef6\uff1bGridServer Driver\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u9a71\u52a8\u7a0b\u5e8f\u7ec4\u4ef6\uff1bGridServer Engine\u662f\u5176\u4e2d\u7684\u4e00\u4e2aGridServer\u5f15\u64ce\u7ec4\u4ef6\u3002\r\n\r\nTIBCO DataSynapse GridServer Manager\u4e2d\u7684GridServer Broker\u3001GridServer Driver\u548cGridServer Engine\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u4f7f\u7528\u4e86\u9519\u8bef\u7684\u52a0\u5bc6\u673a\u5236\u53ca\u5f31\u5bc6\u7801\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u63a7\u5236\u7ec4\u4ef6\u4e4b\u95f4\u7684\u6d41\u91cf\u3002",
  "discovererName": "unknwon",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-13980",
  "openTime": "2018-07-26",
  "patchDescription": "TIBCO DataSynapse GridServer Manager\u662f\u7f8e\u56fdTIBCO\u8f6f\u4ef6\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8e\u7ba1\u7406GridServer\u73af\u5883\u7684\u7ba1\u7406\u7cfb\u7edf\u3002GridServer Broker\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u5de5\u4f5c\u8d1f\u8f7d\u7ba1\u7406\u7ec4\u4ef6\uff1bGridServer Driver\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u9a71\u52a8\u7a0b\u5e8f\u7ec4\u4ef6\uff1bGridServer Engine\u662f\u5176\u4e2d\u7684\u4e00\u4e2aGridServer\u5f15\u64ce\u7ec4\u4ef6\u3002\r\n\r\nTIBCO DataSynapse GridServer Manager\u4e2d\u7684GridServer Broker\u3001GridServer Driver\u548cGridServer Engine\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u4f7f\u7528\u4e86\u9519\u8bef\u7684\u52a0\u5bc6\u673a\u5236\u53ca\u5f31\u5bc6\u7801\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u63a7\u5236\u7ec4\u4ef6\u4e4b\u95f4\u7684\u6d41\u91cf\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "TIBCO DataSynapse GridServer Manager GridServer Broker\u3001GridServer Driver\u548cGridServer Engine\u7ec4\u4ef6\u670d\u52a1\u5668\u52a0\u5bc6\u4f7f\u7528\u4e0d\u5f53\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "TIBCO DataSynapse GridServer Manager 6.2.0",
      "TIBCO DataSynapse GridServer Manager 6.1.1",
      "TIBCO DataSynapse GridServer Manager 6.1.0",
      "TIBCO DataSynapse GridServer Manager 6.0.2",
      "TIBCO DataSynapse GridServer Manager 6.0.1",
      "TIBCO DataSynapse GridServer Manager 6.0.0",
      "TIBCO DataSynapse GridServer Manager \u003c5.1.3"
    ]
  },
  "referenceLink": "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535",
  "serverity": "\u4e2d",
  "submitTime": "2018-05-18",
  "title": "TIBCO DataSynapse GridServer Manager GridServer Broker\u3001GridServer Driver\u548cGridServer Engine\u7ec4\u4ef6\u670d\u52a1\u5668\u52a0\u5bc6\u4f7f\u7528\u4e0d\u5f53\u6f0f\u6d1e"
}

CVE-2017-5535 (GCVE-0-2017-5535)

Vulnerability from cvelistv5 – Published: 2018-05-01 18:00 – Updated: 2024-09-17 03:47

Title

TIBCO DataSynapse GridServer improper use of encryption

Summary

The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

Severity

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

A user with access to network traffic between the affected components could potentially examine that traffic, including passwords used to encrypt further communications.

Assigner

tibco

References

1 reference

URL	Tags
https://www.tibco.com/support/advisories/2018/05/…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
TIBCO Software Inc.	TIBCO DataSynapse GridServer Manager	Affected: unspecified , ≤ 5.1.3 (custom) Affected: 6.0.0 Affected: 6.0.1 Affected: 6.0.2 Affected: 6.1.0 Affected: 6.1.1 Affected: 6.2.0

Date Public

2018-05-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:15.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TIBCO DataSynapse GridServer Manager",
          "vendor": "TIBCO Software Inc.",
          "versions": [
            {
              "lessThanOrEqual": "5.1.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0"
            },
            {
              "status": "affected",
              "version": "6.0.1"
            },
            {
              "status": "affected",
              "version": "6.0.2"
            },
            {
              "status": "affected",
              "version": "6.1.0"
            },
            {
              "status": "affected",
              "version": "6.1.1"
            },
            {
              "status": "affected",
              "version": "6.2.0"
            }
          ]
        }
      ],
      "datePublic": "2018-05-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.\u0027s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A user with access to network traffic between the affected components could potentially examine that traffic, including passwords used to encrypt further communications.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-01T17:57:01.000Z",
        "orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db",
        "shortName": "tibco"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions:\n\nTIBCO DataSynapse GridServer Manager versions 5.1.3 and below update to version 5.2.0 or higher\nTIBCO DataSynapse GridServer Manager versions 6.0.0, 6.0.1, and 6.0.2 update to version 6.3.0 or higher\nTIBCO DataSynapse GridServer Manager versions 6.1.0, and 6.1.1 update to version 6.3.0 or higher\nTIBCO DataSynapse GridServer Manager version 6.2.0 update to version 6.3.0 or higher"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "TIBCO DataSynapse GridServer improper use of encryption",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@tibco.com",
          "DATE_PUBLIC": "2018-05-01T16:00:00.000Z",
          "ID": "CVE-2017-5535",
          "STATE": "PUBLIC",
          "TITLE": "TIBCO DataSynapse GridServer improper use of encryption"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "TIBCO DataSynapse GridServer Manager",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c=",
                            "version_affected": "\u003c=",
                            "version_value": "5.1.3"
                          },
                          {
                            "affected": "=",
                            "version_affected": "=",
                            "version_value": "6.0.0"
                          },
                          {
                            "affected": "=",
                            "version_affected": "=",
                            "version_value": "6.0.1"
                          },
                          {
                            "affected": "=",
                            "version_affected": "=",
                            "version_value": "6.0.2"
                          },
                          {
                            "affected": "=",
                            "version_affected": "=",
                            "version_value": "6.1.0"
                          },
                          {
                            "affected": "=",
                            "version_affected": "=",
                            "version_value": "6.1.1"
                          },
                          {
                            "affected": "=",
                            "version_affected": "=",
                            "version_value": "6.2.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "TIBCO Software Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.\u0027s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "A user with access to network traffic between the affected components could potentially examine that traffic, including passwords used to encrypt further communications."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535",
              "refsource": "CONFIRM",
              "url": "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions:\n\nTIBCO DataSynapse GridServer Manager versions 5.1.3 and below update to version 5.2.0 or higher\nTIBCO DataSynapse GridServer Manager versions 6.0.0, 6.0.1, and 6.0.2 update to version 6.3.0 or higher\nTIBCO DataSynapse GridServer Manager versions 6.1.0, and 6.1.1 update to version 6.3.0 or higher\nTIBCO DataSynapse GridServer Manager version 6.2.0 update to version 6.3.0 or higher"
          }
        ],
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db",
    "assignerShortName": "tibco",
    "cveId": "CVE-2017-5535",
    "datePublished": "2018-05-01T18:00:00.000Z",
    "dateReserved": "2017-01-19T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:47:43.629Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-13980

CVE-2017-5535 (GCVE-0-2017-5535)

Tags

Sightings

Nomenclature