Lucene search

[email protected]CVE-2017-5531

HistoryOct 17, 2017 - 8:29 p.m.

CVE-2017-5531

2017-10-1720:29:00

[email protected]

web.nvd.nist.gov

tibco

mft

command center

internet server

vulnerability

cve-2017-5531

administrator service

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications.

Affected configurations

NVD

Node

tibcomanaged_file_transfer_command_centerMatch8.0.0

tibcomanaged_file_transfer_command_centerMatch8.0.1

tibcomanaged_file_transfer_internet_serverMatch8.0.0

tibcomanaged_file_transfer_internet_serverMatch8.0.1

CPENameOperatorVersion
tibco:managed_file_transfer_command_centertibco managed file transfer command centereq8.0.0
tibco:managed_file_transfer_command_centertibco managed file transfer command centereq8.0.1
tibco:managed_file_transfer_internet_servertibco managed file transfer internet servereq8.0.0
tibco:managed_file_transfer_internet_servertibco managed file transfer internet servereq8.0.1

CPE	Name	Operator	Version
tibco:managed_file_transfer_command_center	tibco managed file transfer command center	eq	8.0.0
tibco:managed_file_transfer_command_center	tibco managed file transfer command center	eq	8.0.1
tibco:managed_file_transfer_internet_server	tibco managed file transfer internet server	eq	8.0.0
tibco:managed_file_transfer_internet_server	tibco managed file transfer internet server	eq	8.0.1

CNA Affected

[
  {
    "product": "TIBCO Managed File Transfer Command Center",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0"
      },
      {
        "status": "affected",
        "version": "8.0.1"
      }
    ]
  },
  {
    "product": "TIBCO Managed File Transfer Internet Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0"
      },
      {
        "status": "affected",
        "version": "8.0.1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101545

www.tibco.com/services/support/advisories

www.tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for CVE-2017-5531

prion1 cvelist1 nvd1