CVE-2022-41559 TIBCO Nimbus Open Redirect Vulnerability
An unauthenticated attacker can exploit an open redirect in TIBCO Nimbus Web Client, requiring user interaction to redirect victims to malicious sites.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-41559?
CVE-2022-41559 is a critical vulnerability in TIBCO Nimbus, published on 12 Dec 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.
Weakness: CWE-601
Which versions are affected by CVE-2022-41559?
It affects 1 product.
Products include Tibco Nimbus.
How do I fix CVE-2022-41559?
No fix has been published for CVE-2022-41559 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-41559 being exploited?
There is no known exploitation of CVE-2022-41559 in the wild and no public exploit code.
Other vulnerabilities in TIBCO Nimbus
Sources
Also known as GHSA-8x89-m4w8-qqrx.