IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO
IRM have discovered six critical remote vulnerabilities in TIBCO =
SmartPGM FX. Five of these vulnerabilities could potentially result in =
an attacker gaining remote administrative control of the server on which =
SmartPGM FX is running and therefore, also allow access to any data =
stored on or being communicated by the server.
The final vulnerability, a Denial of Service attack, would stop the =
SmartPGM FX service so that file transfers could not be performed.
More information can be found at the following location:
http://www.irmplc.com/index.php/111-Vendor-Alerts
Once TIBCO has produced either workarounds or patches to mitigate these =
vulnerabilities, IRM will release advisories which will include full =
technical details.
Andy Davis=A0| Chief Research Officer
Information Risk Management Plc
8th Floor | Kings Building | Smith Square | London SW1P 3JJ
Tel: +44 (0) 1242 225 205
Fax: +44 (0) 1242 225 215
www.irmplc.com
The information contained in this email is privileged and confidential =
and is intended only for the use of the addressee. Unauthorised =
disclosure, copying or distribution of the contents is strictly =
prohibited. Please reply immediately if you receive this email in error =
and then immediately delete it from your system.
Where relevant, any quotation contained within this email is exclusive =
of VAT at the current rate and valid for 30 days from the date of this =
email. Information Risk Management Plc (IRM) does not authorise the =
creation of contracts on its behalf by email. All information contained =
within this email and its attachments are subject to IRM's standard =
terms and conditions, a copy of which is available upon request.
All attachments have been scanned for viruses using regularly updated =
programs. IRM cannot accept liability for any damage you incur as a =
result of virus infection and we advise that you should carry out such =
virus and other checks as you consider appropriate.
IRM is a company registered in England with company number 3612719. The =
above address is the official registered office of IRM.