Description
TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| TIBCO JasperReports Server | TIBCO Software Inc. / TIBCO JasperReports Server | 6.3.0 | affected |
| TIBCO JasperReports Server | TIBCO Software Inc. / TIBCO JasperReports Server | 6.3.2 | affected |
| TIBCO JasperReports Server | TIBCO Software Inc. / TIBCO JasperReports Server | 6.3.3 | affected |
| TIBCO JasperReports Server | TIBCO Software Inc. / TIBCO JasperReports Server | 6.4.0 | affected |
| TIBCO JasperReports Server | TIBCO Software Inc. / TIBCO JasperReports Server | 6.4.2 | affected |
| TIBCO JasperReports Server | TIBCO Software Inc. / TIBCO JasperReports Server | >= unspecified, <= 6.2.4 | affected |
| TIBCO JasperReports Server Community Edition | TIBCO Software Inc. / TIBCO JasperReports Server Community Edition | >= unspecified, <= 6.4.2 | affected |
| TIBCO JasperReports Server for ActiveMatrix BPM | TIBCO Software Inc. / TIBCO JasperReports Server for ActiveMatrix BPM | >= unspecified, <= 6.4.2 | affected |
| TIBCO Jaspersoft for AWS with Multi-Tenancy | TIBCO Software Inc. / TIBCO Jaspersoft for AWS with Multi-Tenancy | >= unspecified, <= 6.4.2 | affected |
| TIBCO Jaspersoft Reporting and Analytics for AWS | TIBCO Software Inc. / TIBCO Jaspersoft Reporting and Analytics for AWS | >= unspecified, <= 6.4.2 | affected |