TIBCO eFTL Token Caching Vulnerability
CVE-2021-43055

5.9MEDIUM

Key Information:

Vendor
Tibco
Status
Tibco Eftl - Community Edition
Tibco Eftl - Developer Edition
Tibco Eftl - Enterprise Edition
Vendor
CVE Published:
11 January 2022

Summary

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.

Affected Version(s)

TIBCO eFTL - Community Edition <= 6.7.2

TIBCO eFTL - Developer Edition <= 6.7.2

TIBCO eFTL - Enterprise Edition <= 6.7.2

References

https://www.tibco.com/services/support/advisories
x_refsource_CONFIRM
https://www.tibco.com/support/advisories/2022/01/tibco-se...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.