CVE-2021-43055medium

CVE-2021-43055: falha de média gravidade em TIBCO eFTL - Community Edition

TIBCO eFTL Token Caching Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TIBCO eFTL -

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.9epss 0.7%
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Produtos afetados
TIBCO Software Inc. · TIBCO eFTL - Community EditionTIBCO Software Inc. · TIBCO eFTL - Developer EditionTIBCO Software Inc. · TIBCO eFTL - Enterprise Edition
CVEs relacionadas — TIBCO eFTL - Community Edition

No mesmo produto, das mais perigosas para as menos.

CVE-2021-43054HIGHTIBCO eFTL Token Generation VulnerabilityEPSS 0.7%CVE-2021-35497HIGHTIBCO FTL unvalidated SAN in client certificatesEPSS 0.4%CVE-2021-28823HIGHTIBCO eFTL Windows Platform Installation vulnerabilityEPSS 0.2%CVE-2022-30574MEDIUMTIBCO eFTL Secret JackingEPSS 0.2%