HIGH✓ PATCH🇬🇧 English

CVE-2021-43046

CVSS 7.5v3.1pub. 2021-11-16upd. 2024-11-21

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain session tokens for the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Tibco Partnerexpress

    APP
    Tibco
    ≤ 6.2.1
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2021-43047CRITICAL9.0PL ✓ten sam produkt

XSS w TIBCO PartnerExpress — Stored i Reflected w komponentach serwera

CVE-2021-43048CRITICAL9.8PL ✓ten sam produkt

Clickjacking w TIBCO PartnerExpress — Interior Server i Gateway Server

CVE-2020-27147MEDIUM6.5ten sam produkt

The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretical...

CVE-2025-3115CRITICAL9.4PL ✓ten sam vendor

RCE w Tibco Spotfire — wstrzyknięcie kodu i nievalidowane nazwy plików

CVE-2023-26216CRITICAL9.1PL ✓ten sam vendor

Path Traversal w TIBCO EBX Add-ons — nieautoryzowany upload plików na serwer