Unscored severity · published Apr 8, 2014
CVE-2014-2541
The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2,…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 do not properly implement access control, which allows remote attackers to obtain sensitive information or modify transmitted information via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Messaging Appliance · Tibco
through 8.7.0 · source: NVD
RE
Rendezvous · Tibco
through 8.4.1; 7.4.11; 7.5.1; 7.5.2; 7.5.3; 7.5.4; +4 more · source: NVD
SE
Substantiation ES · Tibco
through 2.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2541
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2541
www.securitytracker.com
http://www.securitytracker.com/id/1030070
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt
More from Messaging Appliance
–
CVE-2015-4555
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance…
–
CVE-2014-2543
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous…
–
CVE-2014-2542
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon…