CVE Vulnerabilities

CVE-2018-18810

Published: Dec 11, 2018 | Modified: Nov 21, 2024
CVSS 3.x
9.9
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

The Administrator Service component of TIBCO Software Inc.s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.

Affected Software

NameVendorStart VersionEnd Version
Managed_file_transfer_command_centerTibco*7.3.2 (including)
Managed_file_transfer_command_centerTibco8.0.0 (including)8.0.2 (including)
Managed_file_transfer_command_centerTibco8.1.0 (including)8.1.0 (including)
Managed_file_transfer_internet_serverTibco*7.3.2 (including)
Managed_file_transfer_internet_serverTibco8.0.0 (including)8.0.2 (including)
Managed_file_transfer_internet_serverTibco8.1.0 (including)8.1.0 (including)

References