CVE-2021-35498

🗓️ 13 Oct 2021 16:55:10Reported by tibcoType

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that allows an attacker to enter a password other than the legitimate password and it will be accepted as valid

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-35498	13 Oct 202120:26	–	circl
CNNVD	Tibco Ebx 授权问题漏洞	13 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-35498 TIBCO EBX Insecure Login Mechanism	13 Oct 202116:55	–	cvelist
EUVD	EUVD-2021-22139	7 Oct 202500:30	–	euvd
NVD	CVE-2021-35498	13 Oct 202117:15	–	nvd
Prion	Design/Logic Flaw	13 Oct 202117:15	–	prion
Tibco	TIBCO Security Advisory: October 13, 2021 - TIBCO EBX -2021-35498	30 Sep 202122:21	–	tibco
Tibco	TIBCO Security Advisory: October 13, 2021 - TIBCO EBX -2021-35498	30 Sep 202122:21	–	tibco

NVD

Node

tibco ebxRange<5.8.124

tibco ebxRange5.9.3–5.9.15

tibco ebxRange6.0.0–6.0.2

tibco product_and_service_catalog_powered_by_tibco_ebxMatch1.0.0

[
  {
    "product": "TIBCO EBX",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "5.8.123",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO EBX",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "5.9.3"
      },
      {
        "status": "affected",
        "version": "5.9.4"
      },
      {
        "status": "affected",
        "version": "5.9.5"
      },
      {
        "status": "affected",
        "version": "5.9.6"
      },
      {
        "status": "affected",
        "version": "5.9.7"
      },
      {
        "status": "affected",
        "version": "5.9.8"
      },
      {
        "status": "affected",
        "version": "5.9.9"
      },
      {
        "status": "affected",
        "version": "5.9.10"
      },
      {
        "status": "affected",
        "version": "5.9.11"
      },
      {
        "status": "affected",
        "version": "5.9.12"
      },
      {
        "status": "affected",
        "version": "5.9.13"
      },
      {
        "status": "affected",
        "version": "5.9.14"
      }
    ]
  },
  {
    "product": "TIBCO EBX",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0"
      },
      {
        "status": "affected",
        "version": "6.0.1"
      }
    ]
  },
  {
    "product": "TIBCO Product and Service Catalog powered by TIBCO EBX",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0"
      }
    ]
  }
]

Source	Link
tibco	www.tibco.com/services/support/advisories
tibco	www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-13-2021-tibco-ebx-2021-35498

21 Nov 2024 06:12Current

9.6High risk

Vulners AI Score9.6

CVSS 29.3

CVSS 3.19.8

EPSS0.00312

CWE-521