Riskcovery

CVE-2023-26219

TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability

State
Published
Severity
7.4 High
Published
Oct 24, 2023
Updated
Sep 11, 2024
Reserved
Feb 20, 2023

Read the record on cve.org

Description

The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and Agent’s log to obtain credentials used to access associated EMS servers. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.2.2 and below, TIBCO Hawk Distribution for TIBCO Silver Fabric: versions 6.2.2 and below, TIBCO Operational Intelligence Hawk RedTail: versions 7.2.1 and below, and TIBCO Runtime Agent: versions 5.12.2 and below.

Scores

CVSSScoreVectorSource
3.17.4 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:Ntibco

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
TIBCO HawkTIBCO Software Inc.
  • 6.2.2 and earlierAffected
TIBCO Hawk Distribution for TIBCO Silver FabricTIBCO Software Inc.
  • 6.2.2 and earlierAffected
TIBCO Operational Intelligence Hawk RedTailTIBCO Software Inc.
  • 7.2.1 and earlierAffected
TIBCO Runtime AgentTIBCO Software Inc.
  • 5.12.2 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.