PT-2022-11769 · Tibco · Tibco Eftl - Developer Edition+2

Published 2022-01-11 · Updated 2022-07-12 · CVE-2021-43055

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO eFTL - Community Edition versions 6.7.2 and below TIBCO eFTL - Developer Edition versions 6.7.2 and below TIBCO eFTL - Enterprise Edition versions 6.7.2 and below

Description The eFTL Server component contains an easily exploitable issue that allows clients to inherit the permissions of the client that initially connected on the affected system.

Recommendations For TIBCO eFTL - Community Edition versions 6.7.2 and below, update to a version above 6.7.2. For TIBCO eFTL - Developer Edition versions 6.7.2 and below, update to a version above 6.7.2. For TIBCO eFTL - Enterprise Edition versions 6.7.2 and below, update to a version above 6.7.2.

Fix

Related Identifiers

CVE-2021-43055

Affected Products

Tibco Eftl - Community Edition

Tibco Eftl - Developer Edition

Tibco Ftl - Enterprise Edition

References · 6

• https://osv.dev/vulnerability/CVE-2021-43055 · Vendor Advisory
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-eftl-2021-43055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43055 · Security Note
• https://t.me/cibsecurity/35272 · Telegram Post
• https://t.me/cvenotify/25652 · Telegram Post