CVE-2021-43049critical

CVE-2021-43049: critical vulnerability in TIBCO BusinessConnect Container Edition

TIBCO BusinessConnect Container Edition username and password leakage

Published · Updated

Follow this CVE+ Monitor TIBCO BusinessConnect Container

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.3%
The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TIBCO Software Inc. · TIBCO BusinessConnect Container Edition
Related CVEs — TIBCO BusinessConnect Container Edition

In the same product, most dangerous first.

CVE-2021-43050HIGHTIBCO BusinessConnect Container Edition administrative username and passwords leakageEPSS 0.2%