Lucene search

[email protected]CVE-2018-18810

HistoryDec 11, 2018 - 7:29 p.m.

CVE-2018-18810

2018-12-1119:29:00

[email protected]

web.nvd.nist.gov

tibco

software

inc.

managed file transfer

command center

internet server

cve-2018-18810

vulnerability

authenticated user

access

credentials

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.

Affected configurations

NVD

Node

tibcomanaged_file_transfer_command_centerRange≤7.3.2

tibcomanaged_file_transfer_command_centerRange8.0.0–8.0.2

tibcomanaged_file_transfer_command_centerMatch8.1.0

tibcomanaged_file_transfer_internet_serverRange≤7.3.2

tibcomanaged_file_transfer_internet_serverRange8.0.0–8.0.2

tibcomanaged_file_transfer_internet_serverMatch8.1.0

CPENameOperatorVersion
tibco:managed_file_transfer_command_centertibco managed file transfer command centerle7.3.2
tibco:managed_file_transfer_command_centertibco managed file transfer command centerle8.0.2
tibco:managed_file_transfer_command_centertibco managed file transfer command centereq8.1.0
tibco:managed_file_transfer_internet_servertibco managed file transfer internet serverle7.3.2
tibco:managed_file_transfer_internet_servertibco managed file transfer internet serverle8.0.2
tibco:managed_file_transfer_internet_servertibco managed file transfer internet servereq8.1.0

CPE	Name	Operator	Version
tibco:managed_file_transfer_command_center	tibco managed file transfer command center	le	7.3.2
tibco:managed_file_transfer_command_center	tibco managed file transfer command center	le	8.0.2
tibco:managed_file_transfer_command_center	tibco managed file transfer command center	eq	8.1.0
tibco:managed_file_transfer_internet_server	tibco managed file transfer internet server	le	7.3.2
tibco:managed_file_transfer_internet_server	tibco managed file transfer internet server	le	8.0.2
tibco:managed_file_transfer_internet_server	tibco managed file transfer internet server	eq	8.1.0

CNA Affected

[
  {
    "product": "TIBCO Managed File Transfer Command Center",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.3.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "8.0.0"
      },
      {
        "status": "affected",
        "version": "8.0.1"
      },
      {
        "status": "affected",
        "version": "8.0.2"
      },
      {
        "status": "affected",
        "version": "8.1.0"
      }
    ]
  },
  {
    "product": "TIBCO Managed File Transfer Internet Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.3.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "8.0.0"
      },
      {
        "status": "affected",
        "version": "8.0.1"
      },
      {
        "status": "affected",
        "version": "8.0.2"
      },
      {
        "status": "affected",
        "version": "8.1.0"
      }
    ]
  }
]

References

www.tibco.com/services/support/advisories

www.tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for CVE-2018-18810

cvelist1 nvd1 tibco1 prion1