CWE Code: 285
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Authorization
Summary: the authorization component of tibco software inc.'s tibco api exchange gateway, and tibco api exchange gateway distribution for tibco silver fabric contains a vulnerability that theoretically processes oauth authorization incorrectly, leading to potential escalation of privileges for the specific customer endpoint, when the implementation uses multiple scopes. this issue affects: tibco software inc.'s tibco api exchange gateway version 2.3.1 and prior versions, and tibco api exchange gateway distribution for tibco silver fabric version 2.3.1 and prior versions.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-08-08
Last Modified Date: 2019-10-09