CVE-2018-5434

Name of the Vulnerable Software and Affected Versions TIBCO Runtime Agent versions up to and including 5.10.0 TIBCO Runtime Agent for z/Linux versions up to and including 5.9.1

Description The issue allows a malicious user to perform XML external entity expansion (XXE) attacks, potentially disclosing host machine information. This is a result of vulnerabilities in the TIBCO Designer component.

Recommendations For TIBCO Runtime Agent versions up to and including 5.10.0, update to a version later than 5.10.0 to resolve the issue. For TIBCO Runtime Agent for z/Linux versions up to and including 5.9.1, update to a version later than 5.9.1 to resolve the issue.