CVE-2021-28823

The CVE-2021-28823 issue affects the Windows Installation component of TIBCO eFTL (Community, Developer, and Enterprise Editions) version 6.5.0 and earlier. The root cause is a lack of access restrictions on certain installation-time files/folders, enabling a low-privileged, local attacker to ins...

CVE-2022-30574

The CVE-2022-30574 entry describes a vulnerability in the ftlserver component of TIBCO FTL/eFTL that allows a low-privileged, locally authenticated attacker to obtain user credentials and potentially gain full administrative access. Affected products and versions include: TIBCO FTL - Community/Ed...

CVE-2021-35497

CVE-2021-35497 affects TIBCO FTL/ActiveSpaces components (Community, Developer, Enterprise) and their Docker images. The issue is a trust-management flaw that could let a non-administrative, authenticated FTL user cause the system to create illegitimate X.509 certificates, enabling MITM attacks o...

CVE-2021-43055

The CVE-2021-43055 issue affects TIBCO eFTL Server within TIBCO eFTL products (Community, Developer, and Enterprise Editions). The vulnerability stems from an information/privileges inheritance flaw that lets a connected client inherit permissions from the initial client on the affected system, e...

CVE-2021-43054

The CVE-2021-43054 issue affects the eFTL Server component in TIBCO eFTL products (Community, Developer, Enterprise Editions). A low-privilege, network-accessible attacker can generate API tokens that grant access to any channel with arbitrary permissions. Affected releases are 6.7.2 and earlier;...