Vulnerability · Published Feb 14, 2023 · Assigned by tibco

CVE-2022-41564TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability

Medium 6.8

In plain English

A medium-severity security flaw in TIBCO Hawk from TIBCO Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.5%top 59.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0 through 6.2.1 and TIBCO Operational Intelligence Hawk RedTail: versions 7.0.0 through 7.2.0.

Affected products (as reported)

Vendor	Product	Versions
TIBCO Software Inc.	TIBCO Hawk	unspecified – through 6.2.1
TIBCO Software Inc.	TIBCO Operational Intelligence Hawk RedTail	unspecified – through 7.2.0

Weakness: CWE-522 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References

https://www.tibco.com/services/support/advisories