漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
TIBCO Data Virtualization Arbitrary File Download vulnerability
Vulnerability Description
The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Data Virtualization for AWS Marketplace contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to download arbitrary files outside of the scope of the user's permissions on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.3.0 and below, TIBCO Data Virtualization: version 8.4.0, TIBCO Data Virtualization: version 8.5.0, and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.0 and below.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
Tibco Data Virtualization 信息泄露漏洞
Vulnerability Description
Tibco Data Virtualization是美国Tibco公司的一个数据虚拟化平台。 TIBCO Data Virtualization Server 中存在信息泄露漏洞，该漏洞源于产品未对文件下载功能添加权限限制。攻击者可通过该漏洞下载任意文件。
CVSS Information
N/A
Vulnerability Type
N/A