CVE-2020-9415

MEDIUM

TIBCO Data Virtualization <7.0.8 - Privilege Escalation

Title source: llm

Description

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user must be authenticated and have privileges required to monitor the server in an operational capacity. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 7.0.8 and below, versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 and TIBCO Data Virtualization for AWS Marketplace: versions 8.2.0 and below.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.tibco.com/services/support/advisories

Vendor Advisory x_refsource_confirm

https://www.tibco.com/support/advisories/2020/08/tibco-security-advisory-august-18-2020-tibco-data-virtualization

Scores

CVSS v3 5.3

EPSS 0.0029

EPSS Percentile 52.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (6)

tibco/data_virtualization 8.0.0

tibco/data_virtualization 8.1.0

tibco/data_virtualization 8.1.1

tibco/data_virtualization 8.2.0

tibco/data_virtualization < 7.0.8

tibco/data_virtualization_for_aws_marketplace < 8.2.0

Published Aug 18, 2020

Tracked Since Feb 18, 2026