CVE:CVE-2017-5529
CNNVD:CNNVD-201701-836
TIBCO JasperReports Library Community Edition等都是美国TIBCO软件公司的产品。TIBCO JasperReports Library Community Edition是一个报表生成编辑工具的社区版，TIBCO JasperReports Server是它的服务器版。
多款TIBCO产品中存在信息泄露漏洞。攻击者可利用该漏洞获取主机文件系统中可访问的信息。以下产品和版本受到影响：TIBCO JasperReports Library Community Edition 6.4.0及之前的版本；TIBCO JasperReports Library for ActiveMatrix BPM 6.2.0及之前的版本；TIBCO JasperReports Professional 6.2.1及之前的版本和6.3.0版本；TIBCO JasperReports Server 6.1.1及之前的版本，6.2.0版本，6.2.1版本，6.3.0版本；TIBCO JasperReports Server Community Edition 6.3.0及之前的版本；TIBCO JasperReports Server for ActiveMatrix BPM 6.2.0及之前的版本；TIBCO Jaspersoft for AWS with Multi-Tenancy 6.3.0及之前的版本；TIBCO Jaspersoft Reporting and Analytics for AWS 6.3.0及之前的版本；TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.2.0及之前的版本。
solution:Upgrade tibco jasperreports_library_community_edition to a higher version than 6.4.0,and avoid the version (,6.4.0]; Upgrade tibco jasperreports_library_for_activematrix_bpm to a higher version than 6.2.0,and avoid the version (,6.2.0]; Upgrade tibco jasperreports_professional to a higher version than 6.2.1,6.3.0,and avoid the version (,6.2.1],6.3.0; Upgrade tibco jasperreports_server to a higher version than 6.1.1,6.2.0,6.2.1,6.3.0,and avoid the version (,6.1.1],6.2.0,6.2.1,6.3.0; Upgrade tibco jasperreports_server_community_edition to a higher version than 6.3.0,and avoid the version (,6.3.0]; Upgrade tibco jasperreports_server_for_activematrix_bpm to a higher version than 6.2.0,and avoid the version (,6.2.0]; Upgrade tibco jaspersoft_for_aws_with_multi-tenancy to a higher version than 6.3.0,and avoid the version (,6.3.0]; Upgrade tibco jaspersoft_reporting_and_analytics_for_aws to a higher version than 6.3.0,and avoid the version (,6.3.0]; Upgrade tibco jaspersoft_studio_for_activematrix_bpm to a higher version than 6.2.0,and avoid the version (,6.2.0]