PT-2018-14669 · Tibco · Tibco Managed File Transfer Command Center+1

Published 2018-12-11 · Updated 2020-08-24 · CVE-2018-18810

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions up to and including 8.1.0 TIBCO Managed File Transfer Internet Server versions up to and including 8.1.0

Description The issue allows an authenticated user with specific privileges to gain access to credentials of other systems through the Administrator Service component.

Recommendations For TIBCO Managed File Transfer Command Center versions up to and including 8.1.0, update to a version later than 8.1.0 to resolve the issue. For TIBCO Managed File Transfer Internet Server versions up to and including 8.1.0, update to a version later than 8.1.0 to resolve the issue.

Fix

Related Identifiers

CVE-2018-18810

Affected Products

Tibco Managed File Transfer Command Center

Tibco Managed File Transfer Internet Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-18810 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-18810 · Vendor Advisory