CVE-2021-43054

Name of the Vulnerable Software and Affected Versions TIBCO eFTL - Community Edition versions 6.7.2 and below TIBCO eFTL - Developer Edition versions 6.7.2 and below TIBCO eFTL - Enterprise Edition versions 6.7.2 and below

Description The eFTL Server component contains an easily exploitable issue that allows a low-privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions.

Recommendations For TIBCO eFTL - Community Edition versions 6.7.2 and below, update to a version above 6.7.2. For TIBCO eFTL - Developer Edition versions 6.7.2 and below, update to a version above 6.7.2. For TIBCO eFTL - Enterprise Edition versions 6.7.2 and below, update to a version above 6.7.2.