CVE-2022-41564

MEDIUM

TIBCO Hawk & TIBCO Operational Intelligence Hawk RedTail <6.2.1, <7...

Title source: llm

Description

The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0 through 6.2.1 and TIBCO Operational Intelligence Hawk RedTail: versions 7.0.0 through 7.2.0.

References (1)

Core 1

Core References

Vendor Advisory

https://www.tibco.com/services/support/advisories

Scores

CVSS v3 6.8

EPSS 0.0022

EPSS Percentile 44.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-522

Status published

Products (2)

tibco/hawk 6.1.0 - 6.2.2

tibco/operational_intelligence_hawk_redtail 7.0.0 - 7.2.1

Published Feb 14, 2023

Tracked Since Feb 18, 2026