TIBCO Rendezvous Windows Platform Artifact Search vulnerability

The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API components of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions 8.5.1 and below and TIBCO Rendezvous Developer Edition: versions 8.5.1 and below.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

N/A

TIBCO Software Rendezvous Routing Daemon 安全漏洞

TIBCO Software Rendezvous Routing Daemon是美国TIBCO Software公司的一个应用组件。用于TIBCO的组件。 Rendezvous Routing Daemon 存在安全漏洞，该漏洞允许攻击者低特权与当地访问Windows操作系统上的插入恶意软件。

N/A

N/A