Skip to content
OpenAdvisories
High · 8.4 CVE-2021-43050 EUVD-2021-30003GHSA-wcq8-wxhh-8wjx

TIBCO BusinessConnect Container Edition administrative username and passwords leakage

Published Feb 15, 2022 · Updated Sep 17, 2024 · Assigned by tibco

Description

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO BusinessConnect Container Edition unspecified – ≤ 1.1.0 —

References