High severity · published Oct 24, 2023
CVE-2023-26219
TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and Agent’s log to obtain credentials used to access associated EMS servers. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.2.2 and below, TIBCO Hawk Distribution for TIBCO Silver Fabric: versions 6.2.2 and below, TIBCO Operational Intelligence Hawk RedTail: versions 7.2.1 and below, and TIBCO Runtime Agent: versions 5.12.2 and below.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TH
TIBCO Hawk · TIBCO Software Inc.
through 6.2.2 · source: vendor
TR
TIBCO Runtime Agent · TIBCO Software Inc.
through 5.12.2 · source: vendor
HA
Hawk · Tibco
before 6.2.3 · source: NVD
RA
Runtime Agent · Tibco
before 5.12.3 · source: NVD
Affected product
TH
TIBCO Hawk
TIBCO Software Inc.
More from TIBCO Hawk
9.2
CVE-2024-10218
TIBCO Hawk Stored-XEE Vulnerability
9.2
CVE-2024-10217
TIBCO Hawk Stored-XSS Vulnerability