CVE:CVE-2019-8993
CNNVD:CNNVD-201904-1143
多款TIBCO产品中的管理Web服务器组件存在安全漏洞。攻击者可利用该漏洞下载带有凭证信息的文件。以下产品和版本受到影响：TIBCO ActiveMatrix BPM 4.2.0及之前版本；TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric 4.2.0及之前版本；TIBCO ActiveMatrix Policy Director 1.1.0 4.2.0及之前版本；TIBCO ActiveMatrix Service Bus 3.3.0 4.2.0及之前版本；TIBCO ActiveMatrix Service Grid 3.3.1 4.2.0及之前版本；TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric 3.3.0 4.2.0及之前版本；TIBCO Silver Fabric Enabler for ActiveMatrix BPM 1.4.1 4.2.0及之前版本；TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid 1.3.1 4.2.0及之前版本。
solution:Upgrade tibco activematrix_bpm to a higher version than 4.2.0,and avoid the version (,4.2.0]; Upgrade tibco activematrix_policy_director to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade tibco activematrix_service_bus to a higher version than 3.3.0,and avoid the version (,3.3.0]; Upgrade tibco activematrix_service_grid to a higher version than 3.3.0,3.3.1,and avoid the version (,3.3.0],(,3.3.1]; Upgrade tibco silver_fabric_enabler to a higher version than 1.3.1,1.4.1,and avoid the version (,1.3.1],(,1.4.1]