CVE-2021-43054high

CVE-2021-43054: falha de alta gravidade em TIBCO eFTL - Community Edition

TIBCO eFTL Token Generation Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TIBCO eFTL -

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.8%
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Produtos afetados
TIBCO Software Inc. · TIBCO eFTL - Community EditionTIBCO Software Inc. · TIBCO eFTL - Developer EditionTIBCO Software Inc. · TIBCO eFTL - Enterprise Edition
CVEs relacionadas — TIBCO eFTL - Community Edition

No mesmo produto, das mais perigosas para as menos.

CVE-2021-43055MEDIUMTIBCO eFTL Token Caching VulnerabilityEPSS 0.7%CVE-2021-35497HIGHTIBCO FTL unvalidated SAN in client certificatesEPSS 0.4%CVE-2021-28823HIGHTIBCO eFTL Windows Platform Installation vulnerabilityEPSS 0.2%CVE-2022-30574MEDIUMTIBCO eFTL Secret JackingEPSS 0.2%