CVE-2021-43053: high-severity vulnerability in TIBCO FTL - Community Edition
TIBCO FTL Secret Exposure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.5epss 0.8%
The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another application connected to the realm server. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Affected products
TIBCO Software Inc. · TIBCO FTL - Community EditionTIBCO Software Inc. · TIBCO FTL - Developer EditionTIBCO Software Inc. · TIBCO FTL - Enterprise EditionRelated CVEs — TIBCO FTL - Community Edition
In the same product, most dangerous first.
CVE-2018-12412HIGHTIBCO FTL Realm Server Vulnerable to CSRF AttacksEPSS 0.9%CVE-2021-43052CRITICALTIBCO FTL Secret Generation VulnerabilityEPSS 0.9%CVE-2022-30573MEDIUMTIBCO FTL Privilege EscalationEPSS 0.8%CVE-2024-1138HIGHTIBCO FTL Privilege EscalationEPSS 0.5%CVE-2021-35497HIGHTIBCO FTL unvalidated SAN in client certificatesEPSS 0.4%CVE-2021-28820HIGHTIBCO FTL Windows Platform Artifact Search vulnerabilityEPSS 0.3%