by Kastro CVE-2021-35498
TIBCO Software Inc. TIBCO EBX — TIBCO EBX Insecure Login Mechanism
Description · from the CVE record
The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allows an attacker to enter a password other than the legitimate password and it will be accepted as valid. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.123 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, and 5.9.14, TIBCO EBX: versions 6.0.0 and 6.0.1, and TIBCO Product and Service Catalog powered by TIBCO EBX: version 1.0.0.
Affected
ProductAffectedFixed inSource
TIBCO EBXunspecified – 5.8.123–CNA
TIBCO EBX5.9.3–CNA
TIBCO EBX5.9.4–CNA
TIBCO EBX5.9.5–CNA
TIBCO EBX5.9.6–CNA
TIBCO EBX5.9.7–CNA
TIBCO EBX5.9.8–CNA
TIBCO EBX5.9.9–CNA
TIBCO EBX5.9.10–CNA
TIBCO EBX5.9.11–CNA
TIBCO EBX5.9.12–CNA
TIBCO EBX5.9.13–CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
tibco (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H