CVE-2021-23274: falha crítica em TIBCO API Exchange Gateway
TIBCO API Exchange Gateway Clickjack Vulnerability
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar TIBCO API Exchange Gateway+ Monitorar TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.2%
The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO API Exchange Gateway: versions 2.3.3 and below and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric: versions 2.3.3 and below.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
TIBCO Software Inc. · TIBCO API Exchange GatewayTIBCO Software Inc. · TIBCO API Exchange Gateway Distribution for TIBCO Silver FabricCVEs relacionadas — TIBCO API Exchange Gateway
No mesmo produto, das mais perigosas para as menos.