Lucene search

MitreCVE-2015-5711

HistorySep 29, 2015 - 6:59 p.m.

CVE-2015-5711

2015-09-2918:59:04

CWE-200

mitre

web.nvd.nist.gov

tibco

managed file transfer

cve-2015-5711

info disclosure

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

49.1%

JSON

TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request.

Affected configurations

Nvd

Node

tibcomanaged_file_transfer_internet_serverRange≤7.2.4

Node

tibcovaultRange≤2.0.0

Node

tibcomanaged_file_transfer_command_centerRange≤7.2.4

Node

tibcoslingshotRange≤1.9.3

VendorProductVersionCPE
tibcomanaged_file_transfer_internet_server*cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*
tibcovault*cpe:2.3:a:tibco:vault:*:*:*:*:*:*:*:*
tibcomanaged_file_transfer_command_center*cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*
tibcoslingshot*cpe:2.3:a:tibco:slingshot:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	managed_file_transfer_internet_server	*	cpe:2.3:a:tibco:managed_file_transfer_internet_server::::::::
tibco	vault	*	cpe:2.3:a:tibco:vault::::::::
tibco	managed_file_transfer_command_center	*	cpe:2.3:a:tibco:managed_file_transfer_command_center::::::::
tibco	slingshot	*	cpe:2.3:a:tibco:slingshot::::::::

References

www.securitytracker.com/id/1033678

www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt

www.tibco.com/mk/advisory.jsp

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

49.1%

JSON

Related for CVE-2015-5711