CVE-2018-12408

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix BusinessWorks versions up to and including 5.13.0 TIBCO ActiveMatrix BusinessWorks for z/Linux versions up to and including 5.13.0 TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric versions up to and including 5.13.0

Description The BusinessWorks engine component contains a vulnerability that may allow XML eXternal Entity (XXE) attacks via incoming network messages. This could disclose the contents of files accessible to a running BusinessWorks engine.

Recommendations For TIBCO ActiveMatrix BusinessWorks versions up to and including 5.13.0, update to a version later than 5.13.0 to resolve the issue. For TIBCO ActiveMatrix BusinessWorks for z/Linux versions up to and including 5.13.0, update to a version later than 5.13.0 to resolve the issue. For TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric versions up to and including 5.13.0, update to a version later than 5.13.0 to resolve the issue.