Description
The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TIBCO Software Inc. TIBCO eFTL - Community Edition
unspecified to ≤ 6.7.2affected
TIBCO Software Inc. TIBCO eFTL - Developer Edition
unspecified to ≤ 6.7.2affected
TIBCO Software Inc. TIBCO eFTL - Enterprise Edition
unspecified to ≤ 6.7.2affected