QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-5529

Back to search

CVE-2017-5529

Published: Jun 29, 2017

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

4.1

MEDIUM

Description

JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO JasperReports Professional (versions 6.2.1 and below, and 6.3.0), TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.3.0 and below), TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.3.0 and below), and TIBCO Jaspersoft Studio for ActiveMatrix BPM (versions 6.2.0 and below).

VendorProductVersions

TIBCO Software Inc.

TIBCO JasperReports Library Community Edition

affected
6.4.0

TIBCO Software Inc.

TIBCO JasperReports Library for ActiveMatrix BPM

affected
unspecified - <= 6.2.0

TIBCO Software Inc.

TIBCO JasperReports Professional

affected
unspecified - <= 6.2.1
affected
6.3.0

TIBCO Software Inc.

TIBCO JasperReports Server

affected
unspecified - <= 6.1.1
affected
6.2.0
affected
6.2.1
affected
6.3.0

TIBCO Software Inc.

TIBCO JasperReports Server Community Edition

affected
unspecified - <= 6.3.0

TIBCO Software Inc.

TIBCO JasperReports Server for ActiveMatrix BPM

affected
unspecified - <= 6.2.0

TIBCO Software Inc.

TIBCO Jaspersoft for AWS with Multi-Tenancy

affected
unspecified - <= 6.3.0

TIBCO Software Inc.

TIBCO Jaspersoft Reporting and Analytics for AWS

affected
unspecified - <= 6.3.0

TIBCO Software Inc.

TIBCO Jaspersoft Studio for ActiveMatrix BPM

affected
unspecified - <= 6.2.0

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:C/UI:R

Availability

None

Attack Complexity

Low

Attack Vector

Network

Confidentiality

Low

Integrity

None

Privileges Required

Low

Scope

Changed

User Interaction

Required

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now