PT-2017-16562 · Tibco · Tibco Managed File Transfer Command Center+1

Published 2017-10-17 · Updated 2019-10-09 · CVE-2017-5531

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions 8.0.0 through 8.0.1 TIBCO Managed File Transfer Internet Server versions 8.0.0 through 8.0.1

Description The issue may allow any authenticated user to gain administrative control of Managed File Transfer web applications when the Administrator Service is enabled.

Recommendations For TIBCO Managed File Transfer Command Center versions 8.0.0 through 8.0.1, consider disabling the Administrator Service until a patch is available. For TIBCO Managed File Transfer Internet Server versions 8.0.0 through 8.0.1, consider disabling the Administrator Service until a patch is available.

Fix

Related Identifiers

CVE-2017-5531

Affected Products

Tibco Managed File Transfer Command Center

Tibco Managed File Transfer Internet Server

References · 5

• https://tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5531 · Vendor Advisory
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5531 · Security Note
• http://securityfocus.com/bid/101545 · Note