CVE-2021-43053: TIBCO FTL Secret Exposure Vulnerability
First published: Tue Jan 11 2022(Updated: )
The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another application connected to the realm server. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.
Credit: security@tibco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO FTL | <=6.7.2 | |
| TIBCO FTL | <=6.7.2 | |
| TIBCO FTL | <=6.7.2 |
Remedy
TIBCO has released updated versions of the affected components which address these issues. TIBCO FTL - Community Edition versions 6.7.2 and below update to version 6.7.3 or later TIBCO FTL - Developer Edition versions 6.7.2 and below update to version 6.7.3 or later TIBCO FTL - Enterprise Edition versions 6.7.2 and below update to version 6.7.3 or later
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-43053?
CVE-2021-43053 is a vulnerability in the Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition.
What is the severity of CVE-2021-43053?
The severity of CVE-2021-43053 is high, with a severity value of 7.5.
How does CVE-2021-43053 impact TIBCO FTL?
CVE-2021-43053 allows an unauthenticated attacker with network access to obtain the cluster secret of another application in TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition.
Which versions of TIBCO FTL are affected by CVE-2021-43053?
CVE-2021-43053 affects TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition versions up to and including 6.7.2.
How can I get more information about CVE-2021-43053 and its impact?
You can find more information about CVE-2021-43053 and its impact in the TIBCO security advisories and support advisories.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/tibco
- canonical/tibco ftl
- version/tibco ftl/6.7.2