CVE-2020-27146 MEDIUM

CVE-2020-27146: TIBCO iProcess Workspace Browser CSRF

Vendor Tibco Software Inc.
Product TIBCO iProcess Workspace (Browser)
Published November 10, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.0/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A successful attack using this vulnerability requires human interaction from an authenticated user other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser): versions 11.6.0 and below.

Key dates

02Disclosure timeline

November 10, 2020 CVE published
September 17, 2024 Record updated