CVE-2021-43053
TIBCO FTL Secret Exposure Vulnerability
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.5EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 ene 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another application connected to the realm server. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Productos afectados
TIBCO Software Inc. · TIBCO FTL - Community EditionTIBCO Software Inc. · TIBCO FTL - Developer EditionTIBCO Software Inc. · TIBCO FTL - Enterprise Edition¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →