Auto-merge PR#696

Auto-merge PR#696

2021/23xxx/CVE-2021-23271.json

@@ -1,18 +1,90 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
-    "CVE_data_meta": {
-        "ID": "CVE-2021-23271",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
-    },
-    "description": {
-        "description_data": [
-            {
-                "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
-            }
-        ]
-    }
-}
+	"CVE_data_meta": {
+		"ASSIGNER": "security@tibco.com",
+		"DATE_PUBLIC": "2021-02-02T17:00:00Z",
+		"ID": "CVE-2021-23271",
+		"STATE": "PUBLIC",
+		"TITLE": "TIBCO EBX Cross Site Scripting (XSS)"
+	},
+	"affects": {
+		"vendor": {
+			"vendor_data": [
+				{
+					"product": {
+						"product_data": [
+							{
+								"product_name": "TIBCO EBX",
+								"version": {
+									"version_data": [
+										{
+											"version_affected": "<=",
+											"version_value": "5.9.12"
+										}
+									]
+								}
+							}
+						]
+					},
+					"vendor_name": "TIBCO Software Inc."
+				}
+			]
+		}
+	},
+	"data_format": "MITRE",
+	"data_type": "CVE",
+	"data_version": "4.0",
+	"description": {
+		"description_data": [
+			{
+				"lang": "eng",
+				"value": "The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack on the affected system.\n\nAffected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.12 and below.\n"
+			}
+		]
+	},
+	"impact": {
+		"cvss": {
+			"attackComplexity": "LOW",
+			"attackVector": "NETWORK",
+			"availabilityImpact": "HIGH",
+			"baseScore": 8,
+			"baseSeverity": "HIGH",
+			"confidentialityImpact": "HIGH",
+			"integrityImpact": "HIGH",
+			"privilegesRequired": "LOW",
+			"scope": "UNCHANGED",
+			"userInteraction": "REQUIRED",
+			"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
+			"version": "3.0"
+		}
+	},
+	"problemtype": {
+		"problemtype_data": [
+			{
+				"description": [
+					{
+						"lang": "eng",
+						"value": "The impact of these vulnerabilities include the possibility that an attacker would gain full administrative access to the web interface of the affected component."
+					}
+				]
+			}
+		]
+	},
+	"references": {
+		"reference_data": [
+			{
+				"name": "http://www.tibco.com/services/support/advisories",
+				"refsource": "CONFIRM",
+				"url": "http://www.tibco.com/services/support/advisories"
+			}
+		]
+	},
+	"solution": [
+		{
+			"lang": "eng",
+			"value": "TIBCO has released updated versions of the affected components which address these issues.\n\nTIBCO EBX versions 5.9.12 and below update to version 5.9.13 or higher"
+		}
+	],
+	"source": {
+		"discovery": "USER"
+	}
+}