TIBCO Managed File Transfer Credentials Disclosure
CVE-2018-18810

6.8MEDIUM

Key Information:

Vendor

Tibco
Status
Tibco Managed File Transfer Command Center
Tibco Managed File Transfer Internet Server
Vendor
CVE Published:
11 December 2018

What is CVE-2018-18810?

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.

Affected Version(s)

TIBCO Managed File Transfer Command Center <= 7.3.2

TIBCO Managed File Transfer Command Center 8.0.0

TIBCO Managed File Transfer Command Center 8.0.1

References

http://www.tibco.com/services/support/advisories
x_refsource_MISC
https://www.tibco.com/support/advisories/2018/12/tibco-se...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.