CVE-2021-43052: falha crítica em TIBCO FTL - Community Edition
TIBCO FTL Secret Generation Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.9%
The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows authentication bypass due to a hard coded secret used in the default realm server of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Produtos afetados
TIBCO Software Inc. · TIBCO FTL - Community EditionTIBCO Software Inc. · TIBCO FTL - Developer EditionTIBCO Software Inc. · TIBCO FTL - Enterprise EditionCVEs relacionadas — TIBCO FTL - Community Edition
No mesmo produto, das mais perigosas para as menos.
CVE-2018-12412HIGHTIBCO FTL Realm Server Vulnerable to CSRF AttacksEPSS 0.9%CVE-2021-43053HIGHTIBCO FTL Secret Exposure VulnerabilityEPSS 0.8%CVE-2022-30573MEDIUMTIBCO FTL Privilege EscalationEPSS 0.8%CVE-2024-1138HIGHTIBCO FTL Privilege EscalationEPSS 0.5%CVE-2021-35497HIGHTIBCO FTL unvalidated SAN in client certificatesEPSS 0.4%CVE-2021-28820HIGHTIBCO FTL Windows Platform Artifact Search vulnerabilityEPSS 0.3%