CVE-2024-1138 HIGH

CVE-2024-1138: TIBCO FTL Privilege Escalation

Vendor Tibco Software Inc.
Product TIBCO FTL - Enterprise Edition
Published March 12, 2024
Last update March 28, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition: versions 6.10.1 and below.

Key dates

02Disclosure timeline

March 12, 2024 CVE published
March 28, 2025 Record updated