PT-2021-23734 · Tibco · Tibco Partnerexpress

Published 2021-11-16 · Updated 2021-11-19 · CVE-2021-43046

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO PartnerExpress versions 6.2.1 and below

Description The vulnerability in TIBCO PartnerExpress allows an unauthenticated attacker with network access to obtain session tokens for the affected system. This can be achieved through an easily exploitable vulnerability. A successful attack requires human interaction from a person other than the attacker.

Recommendations For versions 6.2.1 and below, update to a version above 6.2.1 to resolve the issue.

Fix

Related Identifiers

CVE-2021-43046

Affected Products

Tibco Partnerexpress

References · 4

• https://osv.dev/vulnerability/CVE-2021-43046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43046 · Security Note
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43046 · Vendor Advisory