CVE:CVE-2021-35500
CNNVD:CNNVD-202201-989
Tibco Data Virtualization是美国Tibco公司的一个数据虚拟化平台。
TIBCO Data Virtualization Server 中存在信息泄露漏洞，该漏洞源于产品未对文件下载功能添加权限限制。攻击者可通过该漏洞下载任意文件。
solution:Upgrade tibco data_virtualization to a higher version than 8.3.0,8.4.0,8.5.0,and avoid the version (,8.3.0],8.4.0,8.5.0; Upgrade tibco data_virtualization_for_aws_marketplace to a higher version than 8.5.0,and avoid the version (,8.5.0]