Skip to content
Connect AISign inSign up free
CVE-2023-262197.4HighCWE-798

CVE-2023-26219: TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability

TIBCO Software Inc. · TIBCO Hawk

Vendor fix available · Affected: TIBCO Software Inc. TIBCO Hawk · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.5%probability of exploitation in the next 30 days
44th percentile
050100

Higher than 44% of scored CVEs

7.4HighCVSS 3.1
LowHigh

DescriptionCVE.org

The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and Agent’s log to obtain credentials used to access associated EMS servers. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.2.2 and below, TIBCO Hawk Distribution for TIBCO Silver Fabric: versions 6.2.2 and below, TIBCO Operational Intelligence Hawk RedTail: versions 7.2.1 and below, and TIBCO Runtime Agent: versions 5.12.2 and below.

Affected products4

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • TIBCO Software Inc. · TIBCO Hawkup to and including 6.2.2
  • TIBCO Software Inc. · TIBCO Hawk Distribution for TIBCO Silver Fabricup to and including 6.2.2
  • TIBCO Software Inc. · TIBCO Operational Intelligence Hawk RedTailup to and including 7.2.1
  • TIBCO Software Inc. · TIBCO Runtime Agentup to and including 5.12.2

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Published
October 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-26219 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References