Riskcovery

CVE-2018-12414

TIBCO Rendezvous Vulnerable to CSRF Attacks

State
Published
Severity
7.5 High
Published
Nov 7, 2018
Updated
Sep 16, 2024
Reserved
Jun 14, 2018

Read the record on cve.org

Description

The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer Edition, TIBCO Rendezvous for z/Linux, TIBCO Rendezvous for z/OS, TIBCO Rendezvous Network Server, TIBCO Substation ES contain vulnerabilities which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions up to and including 8.4.5, TIBCO Rendezvous Developer Edition: versions up to and including 8.4.5, TIBCO Rendezvous for z/Linux: versions up to and including 8.4.5, TIBCO Rendezvous for z/OS: versions up to and including 8.4.5, TIBCO Rendezvous Network Server: versions up to and including 1.1.2, and TIBCO Substation ES: versions up to and including 2.12.2.

Scores

CVSSScoreVectorSource
3.07.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Htibco

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
TIBCO RendezvousTIBCO Software Inc.
  • 8.4.5 and earlierAffected
TIBCO Rendezvous Developer EditionTIBCO Software Inc.
  • 8.4.5 and earlierAffected
TIBCO Rendezvous for z/LinuxTIBCO Software Inc.
  • 8.4.5 and earlierAffected
TIBCO Rendezvous for z/OSTIBCO Software Inc.
  • 8.4.5 and earlierAffected
TIBCO Rendezvous Network ServerTIBCO Software Inc.
  • 1.1.2 and earlierAffected
TIBCO Substation ESTIBCO Software Inc.
  • 2.12.2 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.