Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-43049 EUVD-2021-30002GHSA-mmjj-2xmr-v64v

TIBCO BusinessConnect Container Edition username and password leakage

Published Feb 15, 2022 · Updated Sep 17, 2024 · Assigned by tibco

Description

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO BusinessConnect Container Edition unspecified – ≤ 1.1.0 —

References