Description (CNA)
The authorization component of TIBCO Software Inc.'s TIBCO API Exchange Gateway, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically processes OAuth authorization incorrectly, leading to potential escalation of privileges for the specific customer endpoint, when the implementation uses multiple scopes. This issue affects: TIBCO Software Inc.'s TIBCO API Exchange Gateway version 2.3.1 and prior versions, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric version 2.3.1 and prior versions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TIBCO Software Inc. / TIBCO API Exchange Gateway | affected 2.3.1 and prior |
| TIBCO Software Inc. / TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric | affected 2.3.1 and prior |
CWE
No CWE identifiers supplied.
References
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-7-2019-tibco-api-exchange
ADP enrichment
No English description supplied.