Improper access control in TIBCO products - CVE-2021-28819
Published: March 24, 2021
Vulnerability identifier: #VU51679
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-28819
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in Windows Installation component. A local user can insert malicious software and gain full access to the Windows operating system.
Affected software
TIBCO FTL Enterprise Edition
TIBCO FTL Community Edition
TIBCO FTL Developer Edition
TIBCO FTL Community Edition
TIBCO FTL Developer Edition
How to mitigate CVE-2021-28819
Install updates from vendor's website.
TIBCO FTL Enterprise Edition - update to 6.6.0
TIBCO FTL Community Edition - update to 6.6.0
TIBCO FTL Developer Edition - update to 6.6.0
TIBCO FTL Community Edition - update to 6.6.0
TIBCO FTL Developer Edition - update to 6.6.0