漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
TIBCO API Exchange Gateway Clickjack Vulnerability
Vulnerability Description
The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO API Exchange Gateway: versions 2.3.3 and below and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric: versions 2.3.3 and below.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
TIBCO Software TIBCO API Exchange Gateway 安全漏洞
Vulnerability Description
TIBCO Software TIBCO API Exchange Gateway是美国 (TIBCO Software)公司的一个应用程序。提供了用于管理企业API的中央访问点,并在内部和外部服务,系统和设备之间提供了中介程序。 TIBCO API Exchange Gateway versions 2.3.3 and below 存在安全漏洞,该漏洞允许未经身份验证的网络访问攻击者可利用该漏洞对受影响的系统执行点击劫持攻击。
CVSS Information
N/A
Vulnerability Type
N/A