CVE-2021-43054

The CVE-2021-43054 issue affects the eFTL Server component in TIBCO eFTL products (Community, Developer, Enterprise Editions). A low-privilege, network-accessible attacker can generate API tokens that grant access to any channel with arbitrary permissions. Affected releases are 6.7.2 and earlier;...

TIBCO Security Advisory: January 11, 2022 - TIBCO eFTL -2021-43054

TIBCO eFTL Token Generation Vulnerability Original release date: January 11, 2022 Last revised:--- CVE-2021-43054 Source: TIBCO SoftwareInc. Products Affected TIBCO eFTL - Community Edition versions 6.7.2 and below TIBCO eFTL - Developer Edition versions 6.7.2 and below TIBCO eFTL - Enterprise...