PT-2022-11768
CVE-2021-43054
·
تاريخ النشر
2022-01-11
·
تاريخ التحديث
2022-01-19
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TIBCO eFTL - Community Edition versions 6.7.2 and below
TIBCO eFTL - Developer Edition versions 6.7.2 and below
TIBCO eFTL - Enterprise Edition versions 6.7.2 and below
Description
The eFTL Server component contains an easily exploitable issue that allows a low-privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions.
Recommendations
For TIBCO eFTL - Community Edition versions 6.7.2 and below, update to a version above 6.7.2.
For TIBCO eFTL - Developer Edition versions 6.7.2 and below, update to a version above 6.7.2.
For TIBCO eFTL - Enterprise Edition versions 6.7.2 and below, update to a version above 6.7.2.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾