CVE-2021-43049

EPSS 0.48%
Veröffentlicht 15.02.2022 18:15:07
Zuletzt bearbeitet 21.11.2024 06:28:35
Quelle security@tibco.com
CVE-Watchlists
Login
Unerledigt
Login

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tibco ≫ Businessconnect SwEditioncontainer Version < 1.1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.48%	0.621

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C
security@tibco.com	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

https://www.tibco.com/services/support/advisories

Vendor Advisory

https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43049

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-43049

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-43049

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-43049

EUVD