PT-2017-16562 · Tibco · Tibco Managed File Transfer Command Center+1

Publicado 2017-10-17 · Atualizado 2019-10-09 · CVE-2017-5531

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions 8.0.0 through 8.0.1 TIBCO Managed File Transfer Internet Server versions 8.0.0 through 8.0.1

Description The issue may allow any authenticated user to gain administrative control of Managed File Transfer web applications when the Administrator Service is enabled.

Recommendations For TIBCO Managed File Transfer Command Center versions 8.0.0 through 8.0.1, consider disabling the Administrator Service until a patch is available. For TIBCO Managed File Transfer Internet Server versions 8.0.0 through 8.0.1, consider disabling the Administrator Service until a patch is available.

Correção

Identificadores relacionados

CVE-2017-5531

Produtos afetados

Tibco Managed File Transfer Command Center

Tibco Managed File Transfer Internet Server

Referências · 5

• https://tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-5531 · Aviso do Fabricante
• http://tibco.com/services/support/advisories · Aviso do Fabricante
• http://securityfocus.com/bid/101545 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5531 · Nota de Segurança