CVE:CVE-2012-0687
CNNVD:CNNVD-201203-205
TIBCO 提供了一套综合的、基于标准的软件，可以帮助企业达成实时业务的优势。
TIBCO ActiveMatrix中存在未明信息泄露漏洞，该漏洞源于一个未明错误。攻击者可利用该漏洞通过欺骗用户浏览恶意web站点以泄露敏感信息。以下产品中存在漏洞：TIBCO ActiveMatrix Service Grid 3.1.5之前版本，TIBCO ActiveMatrix Service Bus 3.1.5之前版本，TIBCO ActiveMatrix BusinessWorks Service Engine 5.9.3之前的5.9.x版本，和TIBCO ActiveMatrix BPM 1.3.0之前版本。
solution:Upgrade tibco activematrix_service_bus to a higher version than 2.0.0,2.0.1,2.0.2,2.1.0,2.2.0,2.2.1,2.3.0,2.3.1,3.0.0,3.0.1,and avoid the version 2.0.0,2.0.1,2.0.2,2.1.0,2.2.0,2.2.1,2.3.0,2.3.1,3.0.0,3.0.1; Upgrade tibco activematrix_service_grid to a higher version than 2.0.0,2.0.1,2.1.0,2.2.0,2.2.1,2.3.0,2.3.1,2.3.2,3.0.0,3.0.1,3.1.0,3.1.2,and avoid the version 2.0.0,2.0.1,2.1.0,2.2.0,2.2.1,2.3.0,2.3.1,2.3.2,3.0.0,3.0.1,3.1.0,3.1.2; Upgrade tibco activematrix_businessworks_service_engine to a higher version than 5.8.1,5.6.0,5.6.3,5.6.4,5.7,5.7.1,5.7.2,5.8,5.9.0,5.9.1,5.9.2,and avoid the version (,5.8.1],5.6.0,5.6.3,5.6.4,5.7,5.7.1,5.7.2,5.8,5.9.0,5.9.1,5.9.2; Upgrade tibco silver_fabric_activematrix_service_grid_distribution to a higher version than 3.1.3,5.9.2,and avoid the version 3.1.3,5.9.2; Upgrade tibco activematrix_bpm to a higher version than 1.2.0,1.0.1,1.0.2,1.1.0,1.1.1,and avoid the version (,1.2.0],1.0.1,1.0.2,1.1.0,1.1.1; Upgrade tibco businessevents to a higher version than 3.0,3.0.1,3.0.2,4.0,4.0.1,5.0,and avoid the version 3.0,3.0.1,3.0.2,4.0,4.0.1,5.0; Upgrade tibco activematrix_businessworks to a higher version than 5.9.2,and avoid the version (,5.9.2]