Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-30573

Опубликовано: 09 авг. 2022
Источник: nvd
CVSS3: 6.7
CVSS3: 8.8
EPSS Низкий

Описание

The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO FTL - Enterprise Edition: version 6.8.0.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:ftl:*:*:*:*:enterprise:*:*:*
Версия от 6.0.0 (включая) до 6.7.3 (включая)
cpe:2.3:a:tibco:ftl:*:*:*:*:community:*:*:*
Версия от 6.0.0 (включая) до 6.8.0 (включая)
cpe:2.3:a:tibco:ftl:*:*:*:*:developer:*:*:*
Версия от 6.0.1 (включая) до 6.8.0 (включая)
cpe:2.3:a:tibco:ftl:6.8.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 66%
0.00509
Низкий

6.7 Medium

CVSS3

8.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO FTL - Enterprise Edition: version 6.8.0.

EPSS

Процентиль: 66%
0.00509
Низкий

6.7 Medium

CVSS3

8.8 High

CVSS3

Дефекты

NVD-CWE-noinfo