vulnwire
9.9crit

CVE-2018-18809KEVin critical feedNuclei template

TIBCO JasperReports Library Directory Traversal Vulnerability

Published 7 y ago · modified 4 mo ago · JSON

CVSS
9.9
v3.0 · CNA
CISA KEV
Yes
added 2022-12-29
EPSS
79.1%
percentile 100%
Public exploits
0
none known · Nuclei check

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions up to and including 6.3.4; 6.4.1; 6.4.2; 6.4.21; 7.1.0; 7.2.0, TIBCO JasperReports Library Community Edition: versions up to and including 6.7.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.21, TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.3; 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.

Known exploited (CISA KEV)

Added
3 y ago
Due date
2023-01-19 (3 y ago)
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Vendor / product
TIBCO / JasperReports
CISA name
TIBCO JasperReports Library Directory Traversal Vulnerability

CISA SSVC assessment

Exploitation
Active — exploited in the wild
Automatable
no
Technical impact
total
Assessed
20 mo ago

Exploit prediction (EPSS)

79.06% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • Nuclei template TIBCO JasperReports Library - Directory Traversal · nuclei detection template

CVSS scores

Assigned byVersionScoreVector
CNA3.09.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD3.16.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CNA3.09.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

  • TIBCO Software Inc. TIBCO JasperReports Library
  • TIBCO Software Inc. TIBCO JasperReports Library Community Edition
  • TIBCO Software Inc. TIBCO JasperReports Library for ActiveMatrix BPM
  • TIBCO Software Inc. TIBCO JasperReports Server
  • TIBCO Software Inc. TIBCO JasperReports Server Community Edition
  • TIBCO Software Inc. TIBCO JasperReports Server for ActiveMatrix BPM
  • TIBCO Software Inc. TIBCO Jaspersoft for AWS with Multi-Tenancy
  • TIBCO Software Inc. TIBCO Jaspersoft Reporting and Analytics for AWS

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

  • tibco.com /services/support/advisories · x_refsource_MISC, x_transferred
  • tibco.com /support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-libra · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/107351 · vdb-entry, x_refsource_BID, x_transferred
  • seclists.org /fulldisclosure/2019/Sep/17 · mailing-list, x_refsource_FULLDISC, x_transferred
  • packetstormsecurity.com /files/154406/Tibco-JasperSoft-Path-Traversal.html · x_refsource_MISC, x_transferred
  • security.elarlang.eu /cve-2018-18809-path-traversal-in-tibco-jaspersoft.html · x_refsource_MISC, x_transferred
  • cybersecurityworks.com /zerodays/cve-2018-18809-tibco.html · x_refsource_MISC, x_transferred
  • cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-18809 · government-resource

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.