CVE-2019-11209: TIBCO FTL Escalation Of Privileges for Realm Configuration
First published: Tue Aug 20 2019(Updated: )
The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition 6.0.0; 6.0.1; 6.1.0, TIBCO FTL Developer Edition 6.0.1; 6.1.0, and TIBCO FTL Enterprise Edition 6.0.0; 6.0.1; 6.1.0.
Credit: security@tibco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO FTL | =6.0.0 | |
| TIBCO FTL | =6.0.0 | |
| TIBCO FTL | =6.0.1 | |
| TIBCO FTL | =6.0.1 | |
| TIBCO FTL | =6.0.1 | |
| TIBCO FTL | =6.1.0 | |
| TIBCO FTL | =6.1.0 | |
| TIBCO FTL | =6.1.0 |
Remedy
TIBCO has released updated versions of the affected systems which address these issues. TIBCO FTL Community Edition versions 6.0.0, 6.0.1 and 6.1.0 update to version 6.2.0 or higher. TIBCO FTL Developer Edition versions 6.0.1 and 6.1.0 update to version 6.2.0 or higher. TIBCO FTL Enterprise Edition versions 6.0.0, 6.0.1 and 6.1.0 update to version 6.2.0 or higher.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-11209?
CVE-2019-11209 is a vulnerability in the realm configuration component of TIBCO FTL Community Edition, TIBCO FTL Developer Edition, and TIBCO FTL Enterprise Edition.
What software versions are affected by CVE-2019-11209?
TIBCO FTL Community Edition 6.0.0, 6.0.1, and 6.1.0 are affected by CVE-2019-11209.
How severe is CVE-2019-11209?
CVE-2019-11209 has a severity rating of 8.8 (high).
What is the impact of CVE-2019-11209?
CVE-2019-11209 theoretically fails to properly enforce access controls, which may allow unauthorized access to the affected software.
How can I fix CVE-2019-11209?
To fix CVE-2019-11209, it is recommended to update to a fixed version of TIBCO FTL Community Edition, TIBCO FTL Developer Edition, or TIBCO FTL Enterprise Edition provided by TIBCO Software Inc.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/tibco
- canonical/tibco ftl
- version/tibco ftl/6.0.0
- version/tibco ftl/6.0.1
- version/tibco ftl/6.1.0