Към съдържанието

CVE-2022-30574: TIBCO Software Inc. TIBCO FTL - Community Edition

4.6

CVSS 3.1

0,2%

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се от съседна мрежа, при специфични условия, с обикновен потребителски вход и без действие от потребителя.

    Описание

    Оригинално описание

    The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition, and TIBCO eFTL - Enterprise Edition contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to obtain user credentials to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, TIBCO FTL - Enterprise Edition: version 6.8.0, TIBCO eFTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO eFTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO eFTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO eFTL - Enterprise Edition: version 6.8.0.

    Засегнати продукти

    • TIBCO Software Inc. TIBCO FTL - Community Edition: unspecified до 6.8.0
    • TIBCO Software Inc. TIBCO FTL - Developer Edition: unspecified до 6.8.0
    • TIBCO Software Inc. TIBCO FTL - Enterprise Edition: unspecified до 6.7.3
    • TIBCO Software Inc. TIBCO FTL - Enterprise Edition: 6.8.0
    • TIBCO Software Inc. TIBCO eFTL - Community Edition: unspecified до 6.8.0
    • TIBCO Software Inc. TIBCO eFTL - Developer Edition: unspecified до 6.8.0
    • TIBCO Software Inc. TIBCO eFTL - Enterprise Edition: unspecified до 6.7.3
    • TIBCO Software Inc. TIBCO eFTL - Enterprise Edition: 6.8.0

    История

    • 9 август 2022 Публикувано

    Други уязвимости в TIBCO Software Inc. TIBCO FTL - Community Edition

    Първоизточници

    CVE-2022-30574: TIBCO Software Inc. TIBCO FTL - Community Edition | freedomonline.bg