The Web Server component in TIBCO LogLogic Unity before 1.1.1 allows remote authenticated users to gain privileges, and consequently obtain sensitive information, via an HTTP request.
http://www.tibco.com/mk/advisory.jsp
http://www.tibco.com/assets/bltec3263ae44ae601b/2015-005-advisory.txt