CVE-2021-43048: TIBCO Software Inc. TIBCO PartnerExpress

Описание

Оригинално описание

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.

Засегнати продукти

• TIBCO Software Inc. TIBCO PartnerExpress: unspecified до 6.2.1

История

Други уязвимости в TIBCO Software Inc. TIBCO PartnerExpress

• 9.0CVE-2021-43047
• 7.5CVE-2021-43046
• 6.5CVE-2020-27147

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-43048
• https://nvd.nist.gov/vuln/detail/CVE-2021-43048
• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43048