PT-2020-20643 · Tibco · Tibco Managed File Transfer Internet Server+1

Published 2020-06-30 · Updated 2020-07-10 · CVE-2020-9414

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions 8.2.1 and below TIBCO Managed File Transfer Internet Server versions 8.2.1 and below

Description The issue allows an authenticated user with specific permissions to obtain the session identifier of another user, which could provide administrative rights or file transfer permissions when replayed.

Recommendations For TIBCO Managed File Transfer Command Center versions 8.2.1 and below, update to a version above 8.2.1 to resolve the issue. For TIBCO Managed File Transfer Internet Server versions 8.2.1 and below, update to a version above 8.2.1 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-9414

Affected Products

Tibco Managed File Transfer Command Center

Tibco Managed File Transfer Internet Server

References · 3

• https://osv.dev/vulnerability/CVE-2020-9414 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9414 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory