CVE-2021-43050

TIBCO BusinessConnect Container Edition administrative username and passwords leakage

High · published February 15, 2022

CVSS v3.1
8.4
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2022-02-15T17:55Z
EPSS history
Timeline
  • 15 FEB 17:55Z
    TIBCO BusinessConnect Container Edition administrative username and passwords leakage
    cvelistv5