ByteOS Network

NVD Vulnerability Details :

CVE-2017-5533

Deferred

Source-security@tibco.com

Published At-15 Nov, 2017 | 21:29

Updated At-20 Apr, 2025 | 01:37

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.0	9.3	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	security@tibco.com	N/A
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	security@tibco.com	N/A
http://www.securityfocus.com/bid/101878	security@tibco.com	Third Party Advisory VDB Entry
http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017	security@tibco.com	Issue Tracking Vendor Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	security@tibco.com	N/A
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	security@tibco.com	N/A
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/101878	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Vendor Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History