CVE-2021-43055
TIBCO eFTL Token Caching Vulnerability
- State
- Published
- Severity
- 5.9 Medium
- Published
- Jan 11, 2022
- Updated
- Sep 16, 2024
- Reserved
- Oct 27, 2021
Description
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N | tibco |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
TIBCO eFTL - Community EditionTIBCO Software Inc. |
|
TIBCO eFTL - Developer EditionTIBCO Software Inc. |
|
TIBCO eFTL - Enterprise EditionTIBCO Software Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.