Paper/Archive/CVE-2021-43049

CVE-2021-43049

TIBCO Software Inc. TIBCO BusinessConnect Container Edition — TIBCO BusinessConnect Container Edition username and password leakage

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 71.0.710 × 2014.2 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Affected

ProductAffectedFixed inSource

TIBCO BusinessConnect Container Editionunspecified – 1.1.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

tibco (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftibco.com/services/support/advisories reftibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43049