CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: the domain management component of tibco software inc.'s tibco jasperreports server, tibco jasperreports server community edition, tibco jasperreports server for activematrix bpm, tibco jaspersoft for aws with multi-tenancy, and tibco jaspersoft reporting and analytics for aws contains a race-condition vulnerability that may allow any users with domain save privileges to gain superuser privileges. affected releases are tibco software inc.'s tibco jasperreports server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, tibco jasperreports server community edition: versions up to and including 7.1.0, tibco jasperreports server for activematrix bpm: versions up to and including 6.4.3, tibco jaspersoft for aws with multi-tenancy: versions up to and including 7.1.0, and tibco jaspersoft reporting and analytics for aws: versions up to and including 7.1.0.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-03-07
Last Modified Date: 2019-10-09