Tibco Eftl Information Disclosure Vulnerability (CNVD-2022-15513)

Tibco Eftl is an add-on to Tibco Ftl and Tibco Enterprise Message Service™ from Tibco USA, Inc. Extending Tibco Ftl® messaging to platforms such as Web browsers and mobile devices, TIBCO eFTL is vulnerable to information disclosure, which can be exploited by a low privilege attacker with network access to generate an API token that can access any other channel with arbitrary privileges.