CVE-2022-30573

The CVE-2022-30573 issue affects the ftlserver component of TIBCO FTL across Community (6.0.0–6.8.0), Developer (6.0.1–6.8.0), and Enterprise Editions (6.0.0–6.7.3 and 6.8.0). The vulnerability enables a low-privileged, network-access attacker to escalate privileges on the ftlserver, potentially ...

CVE-2022-30574

The CVE-2022-30574 entry describes a vulnerability in the ftlserver component of TIBCO FTL/eFTL that allows a low-privileged, locally authenticated attacker to obtain user credentials and potentially gain full administrative access. Affected products and versions include: TIBCO FTL - Community/Ed...

CVE-2021-28820

CVE-2021-28820 affects TIBCO FTL on Windows: the FTL Server (tibftlserver) and FTL APIs (C, Go, Java, .NET) across Community, Developer, and Enterprise Editions (version 6.5.0 and below). Root cause: the component searches for run-time artifacts outside the installation hierarchy, enabling a low-...

CVE-2021-35497

CVE-2021-35497 affects TIBCO FTL/ActiveSpaces components (Community, Developer, Enterprise) and their Docker images. The issue is a trust-management flaw that could let a non-administrative, authenticated FTL user cause the system to create illegitimate X.509 certificates, enabling MITM attacks o...

CVE-2018-12412

The CVE-2018-12412 issue affects the realm server component (tibrealmserver) of TIBCO FTL for Community, Developer, and Enterprise Editions up to version 5.4.0. The vulnerability is a CSRF flaw that could allow an attacker to gain realm configuration rights and perform malicious operations on end...

CVE-2021-43052

The CVE-2021-43052 issue affects TIBCO FTL Realm Server in Community, Developer, and Enterprise Editions (version 6.7.2 and earlier). The root cause is a hard-coded secret in the default realm server, enabling authentication bypass. Impact per advisory: attacker gains full access to communication...

CVE-2021-43053

CVE-2021-43053 affects the Realm Server component of TIBCO FTL (Community, Developer, Enterprise Editions). Versions 6.7.2 and earlier are vulnerable to an information-disclosure flaw that allows an unauthenticated, network-accessible attacker to obtain the cluster secret of another application c...

CVE-2021-28819

CVE-2021-28819 affects the Windows Installation component of TIBCO FTL (Community, Developer, Enterprise) versions 6.5.0 and below. The vulnerability arises from a lack of access restrictions on certain installation files/folders, allowing a low-privileged, local attacker to insert and execute ma...

CVE-2019-11209

CVE-2019-11209 affects TIBCO FTL products (Community, Developer, and Enterprise Editions) across multiple 6.x versions: Community 6.0.0/6.0.1/6.1.0; Developer 6.0.1/6.1.0; Enterprise 6.0.0/6.0.1/6.1.0. The vulnerability is in the realm configuration component and, per the description, could theor...