TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and Agent’s log to obtain credentials used to access associated EMS servers. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.2.2 and below, TIBCO Hawk Distribution for TIBCO Silver Fabric: versions 6.2.2 and below, TIBCO Operational Intelligence Hawk RedTail: versions 7.2.1 and below, and TIBCO Runtime Agent: versions 5.12.2 and below.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TIBCO | TIBCO Hawk | up to 6.2.2 | — | No fix listed | CNA |
| TIBCO | TIBCO Hawk Distribution for TIBCO Silver Fabric | up to 6.2.2 | — | No fix listed | CNA |
| TIBCO | TIBCO Operational Intelligence Hawk RedTail | up to 7.2.1 | — | No fix listed | CNA |
| TIBCO | TIBCO Runtime Agent | up to 5.12.2 | — | No fix listed | CNA |
- TIBCO Hawk VendorTIBCO Affected up to 6.2.2 Fixed in — No fix listed CNA
- TIBCO Hawk Distribution for TIBCO Silver Fabric VendorTIBCO Affected up to 6.2.2 Fixed in — No fix listed CNA
- TIBCO Operational Intelligence Hawk RedTail VendorTIBCO Affected up to 7.2.1 Fixed in — No fix listed CNA
- TIBCO Runtime Agent VendorTIBCO Affected up to 5.12.2 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:tibco:hawk:*:*:*:*:*:*:*:* | before 6.2.3 | Vulnerable | TIBCO |
| cpe:2.3:a:tibco:hawk_distribution_for_tibco_silver_fabric:*:*:*:*:*:*:*:* | before 6.2.3 | Vulnerable | TIBCO |
| cpe:2.3:a:tibco:operational_intelligence_hawk_redtail:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | TIBCO |
| cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:* | before 5.12.3 | Vulnerable | TIBCO |
- cpe:2.3:a:tibco:hawk:*:*:*:*:*:*:*:* Versions before 6.2.3 Vulnerable ·TIBCO
- cpe:2.3:a:tibco:hawk_distribution_for_tibco_silver_fabric:*:*:*:*:*:*:*:* Versions before 6.2.3 Vulnerable ·TIBCO
- cpe:2.3:a:tibco:operational_intelligence_hawk_redtail:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·TIBCO
- cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:* Versions before 5.12.3 Vulnerable ·TIBCO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-26219
- 2026-10-03 Alias added: GHSA-w4qw-rxr9-pgfx
References
More TIBCO Hawk vulnerabilities
- TI-2008-03199 Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk… CVSS 2.0HIGH 10.0
- TI-2008-01632 Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple… CVSS 2.0HIGH 9.3
- TI-2006-02738 Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4… CVSS 2.0HIGH 7.5
- TI-2006-02737 Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO… CVSS 2.0MEDIUM 6.8
- TI-2022-19969 TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability CVSS 3.1MEDIUM 6.8
Sources
- CVE-2023-26219 · CVE Program
- CVE-2023-26219 · NVD
- FIRST EPSS
- GHSA-w4qw-rxr9-pgfx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences