What’s Vulnerable › Vulnerabilities

CVE-2021-43050: TIBCO BusinessConnect Container Edition administrative username and passwords leakage

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-15 · updated 2026-06-17

Description

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Affected products

• TIBCO Software Inc. TIBCO BusinessConnect: before 1.1.1 — fixed in 1.1.1

How to fix

Upgrade to a fixed version: TIBCO Software Inc. TIBCO BusinessConnect 1.1.1. Check the vendor advisory for mitigations.

References

• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43050
• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43050

Get alerted when CVE-2021-43050 or the next vulnerability affects your stack