TIBCO Runtime Agent (TRA ) Hawk agent and Security Advisory (CVE-2022-41564)

TIBCO Runtime Agent (TRA ) Hawk agent and Security Advisory (CVE-2022-41564)

book

Article ID: KB0071493

calendar_today

Updated On:

Products Versions
TIBCO Runtime Agent (TRA) 5.x.x

Description

TIBCO released Security Advisory for CVE-2022-41564 on February 14, 2023 
"TIBCO Security Advisory: February 14, 2023 - TIBCO Operational Intelligence Hawk Redtail - CVE-2022-41564" (https://www.tibco.com/support/advisories/2023/02/tibco-security-advisory-february-14-2023-tibco-oi-hawk-redtail-cve-2022-41564)





 

Issue/Introduction

Affect to TIBCO Runtime Agent (TRA ) embedded Hawk Agent by Security Advisory (CVE-2022-41564)

Environment

OS: All

Resolution

As stated in the security advisory, "Hawk Console" in Hawk 6.1.0 through 6.2.1 and Operational Intelligence Hawk RedTail versions 7.0.0 through 7.2.0 is being affected. 
TIBCO Runtime Agent (TRA) releases should not be affected by CVE-2022-41564.
"Hawk Console" is a component provided in the standalone Hawk/RedTail installation. The embedded Hawk Agent in TRA releases does not include the component "Hawk Console." 
But we do recommend customers upgrade the TRA version of their domain to the latest 5.12.2 which has Hawk 6.2.2.

If you have further questions please contact TIBCO support. 

Additional Information

"TIBCO Security Advisory: February 14, 2023 - TIBCO Operational Intelligence Hawk Redtail - CVE-2022-41564" (https://www.tibco.com/support/advisories/2023/02/tibco-security-advisory-february-14-2023-tibco-oi-hawk-redtail-cve-2022-41564)