CVE-2021-43053

TIBCO FTL Secret Exposure Vulnerability

High · published January 11, 2022

CVSS v3.1
8.5
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another application connected to the realm server. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00817 · 56.7th percentile
Published
2022-01-11T18:25Z
EPSS history
Timeline
  • 11 JAN 18:25Z
    TIBCO FTL Secret Exposure Vulnerability
    cvelistv5