CVE-2021-43046
TIBCO PartnerExpress Session Token in URL
- State
- Published
- Severity
- 7.5 High
- Published
- Nov 16, 2021
- Updated
- Sep 16, 2024
- Reserved
- Oct 27, 2021
Description
The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain session tokens for the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | tibco |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
TIBCO PartnerExpressTIBCO Software Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.