Description
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TIBCO Software | TIBCO eFTL - Community Edition | unspecified – ≤ 6.7.2 | — |
| TIBCO Software | TIBCO eFTL - Developer Edition | unspecified – ≤ 6.7.2 | — |
| TIBCO Software | TIBCO eFTL - Enterprise Edition | unspecified – ≤ 6.7.2 | — |