CVE-2021-43048 TIBCO PartnerExpress Click-Jacking vulnerability
An unauthenticated attacker can perform clickjacking attacks on TIBCO PartnerExpress servers, potentially bypassing security controls without user interaction.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-43048?
CVE-2021-43048 is a critical vulnerability in TIBCO PartnerExpress, published on 16 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.
Weakness: CWE-1021
Which versions are affected by CVE-2021-43048?
It affects 1 product.
Products include Tibco Partnerexpress.
How do I fix CVE-2021-43048?
No fix has been published for CVE-2021-43048 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-43048 being exploited?
There is no known exploitation of CVE-2021-43048 in the wild and no public exploit code.
Other vulnerabilities in TIBCO PartnerExpress
Sources
Also known as GHSA-r38q-w334-3c57.