CVE:CVE-2019-11207
CNNVD:CNNVD-201908-916
TIBCO Software LogLogic Enterprise Virtual Appliance和TIBCO Software LogLogic Log Management Intelligence都是美国TIBCO Software公司的产品。TIBCO Software LogLogic Enterprise Virtual Appliance是一套日志管理一体化软件解决方案。TIBCO Software LogLogic Log Management Intelligence是一套端到端的日志管理解决方案。
TIBCO LogLogic Enterprise Virtual Appliance和TIBCO LogLogic Log Management Intelligence中的Web服务器组件存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：TIBCO LogLogic Enterprise Virtual Appliance 6.2.1及之前版本；TIBCO LogLogic Log Management Intelligence 6.2.1及之前版本；Appliances TIBCO LogLogic LX825 Appliance 0.0.004版本；TIBCO LogLogic LX1025 Appliance 0.0.004版本；TIBCO LogLogic LX4025 Appliance 0.0.004版本；TIBCO LogLogic MX3025 Appliance 0.0.004版本；TIBCO LogLogic MX4025 Appliance 0.0.004版本；TIBCO LogLogic ST1025 Appliance 0.0.004版本；TIBCO LogLogic ST2025-SAN Appliance 0.0.004版本；使用在TIBCO LogLogic Log Management Intelligence 6.2.1及之前版本中的TIBCO LogLogic ST4025 Appliance 0.0.004版本；Appliances TIBCO LogLogic LX1035 Appliance 0.0.005版本；TIBCO LogLogic LX1025R1 Appliance 0.0.004版本；TIBCO LogLogic LX1025R2 Appliance 0.0.004版本；TIBCO LogLogic LX4025R1 Appliance 0.0.004版本；TIBCO LogLogic LX4025R2 Appliance 0.0.004版本；TIBCO LogLogic LX4035 Appliance 0.0.005版本；TIBCO LogLogic ST2025-SANR1 Appliance 0.0.004版本；TIBCO LogLogic ST2025-SANR2 Appliance 0.0.004版本；TIBCO LogLogic ST2035-SAN Appliance 0.0.005版本；TIBCO LogLogic ST4025R1 Appliance 0.0.004版本；TIBCO LogLogic ST4025R2 Appliance 0.0.004版本；使用在TIBCO LogLogic Log Management Intelligence 6.2.1及之前版本中的TIBCO LogLogic ST4035 Appliance 0.0.005版本。
solution:Upgrade tibco loglogic_enterprise_virtual_appliance to a higher version than 6.2.1,and avoid the version (,6.2.1]; Upgrade tibco loglogic_log_management_intelligence to a higher version than 6.2.1,and avoid the version (,6.2.1]; Upgrade tibco loglogic_lx825_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx4025_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_mx3025_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_mx4025_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st1025_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st2025-san_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st4025_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx1025_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx1035_firmware to a higher version than 0.0.005,and avoid the version 0.0.005; Upgrade tibco loglogic_lx1025r1_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx1025r2_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx4025r1_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx4025r2_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_lx4035_firmware to a higher version than 0.0.005,and avoid the version 0.0.005; Upgrade tibco loglogic_st2025-sanr1_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st2025-sanr2_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st2035-san_firmware to a higher version than 0.0.005,and avoid the version 0.0.005; Upgrade tibco loglogic_st4025r1_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st4025r2_firmware to a higher version than 0.0.004,and avoid the version 0.0.004; Upgrade tibco loglogic_st4035_firmware to a higher version than 0.0.005,and avoid the version 0.0.005