CVE-2019-11209: TIBCO FTL Escalation Of Privileges for Realm Configuration

Published Aug 20, 2019

Updated

The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition 6.0.0; 6.0.1; 6.1.0, TIBCO FTL Developer Edition 6.0.1; 6.1.0, and TIBCO FTL Enterprise Edition 6.0.0; 6.0.1; 6.1.0.

Affected Software

8 affected components

TIBCO FTL=6.0.0

TIBCO FTL=6.0.1

TIBCO FTL=6.1.0

Remediation

Information

TIBCO has released updated versions of the affected systems which address these issues. TIBCO FTL Community Edition versions 6.0.0, 6.0.1 and 6.1.0 update to version 6.2.0 or higher. TIBCO FTL Developer Edition versions 6.0.1 and 6.1.0 update to version 6.2.0 or higher. TIBCO FTL Enterprise Edition versions 6.0.0, 6.0.1 and 6.1.0 update to version 6.2.0 or higher.

Event History

Aug 20, 2019

CVE Published

via MITRE·05:23 PM

Data Sourced

via MITRE·05:23 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-11209?

CVE-2019-11209 is a vulnerability in the realm configuration component of TIBCO FTL Community Edition, TIBCO FTL Developer Edition, and TIBCO FTL Enterprise Edition.

What software versions are affected by CVE-2019-11209?

TIBCO FTL Community Edition 6.0.0, 6.0.1, and 6.1.0 are affected by CVE-2019-11209.

How severe is CVE-2019-11209?

CVE-2019-11209 has a severity rating of 8.8 (high).

What is the impact of CVE-2019-11209?

CVE-2019-11209 theoretically fails to properly enforce access controls, which may allow unauthorized access to the affected software.

How can I fix CVE-2019-11209?

To fix CVE-2019-11209, it is recommended to update to a fixed version of TIBCO FTL Community Edition, TIBCO FTL Developer Edition, or TIBCO FTL Enterprise Edition provided by TIBCO Software Inc.