https://bugzilla.redhat.com/show_bug.cgi?id=1516988
Bug ID: 1516988
Summary: CVE-2017-5533 jasperreports: Information disclosure in
content cache
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
A vulnerability in the server content cache of TIBCO JasperReports Server,
TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for
ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO
Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails
to prevent remote access to all the contents of the web application, including
key configuration files. Affected releases are TIBCO JasperReports Server
6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports
Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy
6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.
External References:
https://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-...
--
You are receiving this mail because:
You are on the CC list for the bug.