CVE-2017-5535

The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

• CWE-326

• https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535Vendor Advisory
• https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535Vendor Advisory

Published

May 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5529JasperReports library components contain an information disc…4.1
• CVE-2017-5530The tibbr web server components of tibbr Community, and tibb…8.1
• CVE-2017-5531Deployments of TIBCO Managed File Transfer Command Center ve…8
• CVE-2017-5532A vulnerability in the report renderer component of TIBCO Ja…5.4
• CVE-2017-5533A vulnerability in the server content cache of TIBCO JasperR…9.3
• CVE-2017-5534The tibbr user profiles components of tibbr Community, and t…8.8
• CVE-2017-5536The GridServer Broker, and GridServer Director components of…6.3
• CVE-2017-5537The password reset form in Weblate before 2.10.1 provides di…
• CVE-2017-5538The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core…
• CVE-2017-5539The patch for directory traversal (CVE-2017-5480) in b2evolu…
• CVE-2017-5541Directory traversal vulnerability in template/usererror.miss…
• CVE-2017-5542Cross-site scripting (XSS) vulnerability in template/usererr…