CVE-2011-2021

MÉDIO 4.3CVE-2011-2021 · Published 20/05/2011 · updated 16/06/2026

Em resumo

CVE-2011-2021 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta iprocess engine (tibco), iprocess workspace (tibco).
Chance de exploração nos próximos 30 dias (EPSS): 2.0%, maior que 80.2% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
iprocess engine tibco	`= 10.3.0= 10.3.1= 10.3.2= 10.3.3= 10.3.4= 10.3.5= 10.4= 10.4.1= 10.5= 10.6= 10.6.0= 10.6.1= 10.6.2= 11.0= 11.1.1≤ 11.1.2`	No fix yet
iprocess workspace tibco	`= 11.0= 11.1= 11.2≤ 11.3`	No fix yet

Description

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.

References

osvdb.org/72554
secunia.com/advisories/44639 · Vendor Advisory
securityfocus.com/bid/47921
tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt · Vendor Advisory
tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp · Vendor Advisory
vupen.com/english/advisories/2011/1272 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/67538

Mais vulnerabilidades de iprocess engine

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

iprocess engine

tibco

= 10.3.0= 10.3.1= 10.3.2= 10.3.3= 10.3.4= 10.3.5= 10.4= 10.4.1= 10.5= 10.6= 10.6.0= 10.6.1= 10.6.2= 11.0= 11.1.1≤ 11.1.2

No fix yet

iprocess workspace

tibco

= 11.0= 11.1= 11.2≤ 11.3

No fix yet

Mais vulnerabilidades de iprocess engine

Ver tudo →