TIBCO Products and the Apache Struts Vulnerability

TIBCO Products and the Apache Struts Vulnerability

book

Article ID: KB0108117

calendar_today

Updated On:

Products Versions
All Products -

Description

TiBCO Engineering has been evaluating our product set against the Apache Struts vulnerability described in CVE-2017-9085.

While some of TIBCO products do incorporate Apache Struts, we are not aware of any way to exploit the known vulnerabilities within these products.  

As a part of normal product lifecycle management, we are planning to upgrade those products containing Apache Struts to the latest not-known-to-be-vulnerable versions in future releases.

Issue/Introduction

TIBCO Products not vulnerable to the Apache Struts Vulnerability CVE-2017-9805

Environment

all platforms