Vulnerability · Published Apr 20, 2021 · Assigned by tibco
CVE-2021-28828TIBCO Administrator SQL injection vulnerability
High 7.6
In plain English
A high-severity security flaw in TIBCO Administrator - Enterprise Edition from TIBCO Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Official description
The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a SQL injection attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, and TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TIBCO Software Inc. | TIBCO Administrator - Enterprise Edition | unspecified – through 5.10.2 |
| TIBCO Software Inc. | TIBCO Administrator - Enterprise Edition | 5.11.05.11.1 |
| TIBCO Software Inc. | TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric | unspecified – through 5.10.2 |
| TIBCO Software Inc. | TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric | 5.11.05.11.1 |
| TIBCO Software Inc. | TIBCO Administrator - Enterprise Edition for z/Linux | unspecified – through 5.10.2 |
| TIBCO Software Inc. | TIBCO Administrator - Enterprise Edition for z/Linux | 5.11.05.11.1 |