CVE-2021-43055medium

CVE-2021-43055: medium-severity vulnerability in TIBCO eFTL - Community Edition

TIBCO eFTL Token Caching Vulnerability

Published · Updated

Follow this CVE+ Monitor TIBCO eFTL -

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.7%
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products
TIBCO Software Inc. · TIBCO eFTL - Community EditionTIBCO Software Inc. · TIBCO eFTL - Developer EditionTIBCO Software Inc. · TIBCO eFTL - Enterprise Edition
Related CVEs — TIBCO eFTL - Community Edition

In the same product, most dangerous first.

CVE-2021-43054HIGHTIBCO eFTL Token Generation VulnerabilityEPSS 0.7%CVE-2021-35497HIGHTIBCO FTL unvalidated SAN in client certificatesEPSS 0.4%CVE-2021-28823HIGHTIBCO eFTL Windows Platform Installation vulnerabilityEPSS 0.2%CVE-2022-30574MEDIUMTIBCO eFTL Secret JackingEPSS 0.2%