PT-2020-20642 · Tibco · Tibco Managed File Transfer Internet Server+1

Published 2020-06-30 · Updated 2020-07-10 · CVE-2020-9413

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions 8.2.1 and below TIBCO Managed File Transfer Internet Server versions 8.2.1 and below

Description The issue allows an attacker to craft a URL that can execute arbitrary commands on the affected system. This can happen if an authenticated user with an active session is convinced to enter or click on the malicious URL.

Recommendations For TIBCO Managed File Transfer Command Center versions 8.2.1 and below, update to a version above 8.2.1 to resolve the issue. For TIBCO Managed File Transfer Internet Server versions 8.2.1 and below, update to a version above 8.2.1 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-9413

Affected Products

Tibco Managed File Transfer Command Center

Tibco Managed File Transfer Internet Server

References · 3

• https://osv.dev/vulnerability/CVE-2020-9413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9413 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory