PT-2019-12187 · Tibco Software · Tibco Eftl - Community Edition+2

Published 2019-08-20 · Updated 2020-08-24 · CVE-2019-11209

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO FTL Community Edition versions 6.0.0 through 6.1.0 TIBCO FTL Developer Edition versions 6.0.1 through 6.1.0 TIBCO FTL Enterprise Edition versions 6.0.0 through 6.1.0

Description The realm configuration component of TIBCO Software Inc.'s TIBCO FTL contains a vulnerability that theoretically fails to properly enforce access controls.

Recommendations For TIBCO FTL Community Edition versions 6.0.0 through 6.1.0, update to a version that properly enforces access controls. For TIBCO FTL Developer Edition versions 6.0.1 through 6.1.0, update to a version that properly enforces access controls. For TIBCO FTL Enterprise Edition versions 6.0.0 through 6.1.0, update to a version that properly enforces access controls.

Fix

Related Identifiers

CVE-2019-11209

Affected Products

Tibco Eftl - Community Edition

Tibco Eftl - Developer Edition

Tibco Ftl - Enterprise Edition

References · 4

• https://tibco.com/support/advisories/2019/08/tibco-security-advisory-august-20-2019-tibco-ftl · Vendor Advisory
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11209 · Security Note