TIBCO released Security Advisory for CVE-2022-41564 on February 14, 2023 "TIBCO Security Advisory: February 14, 2023 - TIBCO Operational Intelligence Hawk Redtail - CVE-2022-41564" (https://www.tibco.com/support/advisories/2023/02/tibco-security-advisory-february-14-2023-tibco-oi-hawk-redtail-cve-2022-41564)
Issue/Introduction
Affect to TIBCO Runtime Agent (TRA ) embedded Hawk Agent by Security Advisory (CVE-2022-41564)
Environment
OS: All
Resolution
As stated in the security advisory, "Hawk Console" in Hawk 6.1.0 through 6.2.1 and Operational Intelligence Hawk RedTail versions 7.0.0 through 7.2.0 is being affected. TIBCO Runtime Agent (TRA) releases should not be affected by CVE-2022-41564. "Hawk Console" is a component provided in the standalone Hawk/RedTail installation. The embedded Hawk Agent in TRA releases does not include the component "Hawk Console." But we do recommend customers upgrade the TRA version of their domain to the latest 5.12.2 which has Hawk 6.2.2.
If you have further questions please contact TIBCO support.