CVE-2020-9414

The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user...

Design/Logic Flaw

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...

CVE-2020-9413

CVE-2020-9413 affects TIBCO Managed File Transfer Command Center (CC) and Internet Server (IS) up to version 8.2.1 and earlier. The vulnerability resides in the MFT Browser file transfer and MFT Browser admin client components, allowing an attacker to craft a URL that, when visited by an authenti...

CVE-2020-9414: Improper Neutralization of Input During Web Page Generation

The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user...

CVE-2020-9413: Improper Neutralization of Input During Web Page Generation

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...

CVE-2020-9411

CVE-2020-9411 affects TIBCO Managed File Transfer Platform Server for IBM i, specifically the file transfer component. The issue allows unauthorized network file transfers to/from the file system when the configuration option Require Node Resp is set to No, potentially enabling reading/writing of...

TIBCO Security Advisory: June 9, 2020 - TIBCO Managed File Transfer PlatformServer for IBMi

TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution Original release date: June 9,2020 Last revised: CVE-2020-9412 Source: TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution Original release date: June 9, 2020 Last...

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

Cross site request forgery (csrf)

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2019-12769

CVE-2019-12769 affects SolarWinds Serv-U Managed File Transfer (MFT) Web client prior to 15.1.6 Hotfix 2. The vulnerability is a Cross-Site Request Forgery in the file upload function exercised via ?Command=Upload with Dir and File parameters. Public sources indicate an attacker could exploit thi...

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2019-12769: Cross-Site Request Forgery (CSRF)

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2013-2568: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wirelessmft.cgi, which could let a remote malicious user execute arbitrary code...

CVE-2013-2573: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

CVE-2019-2538: Undefined Security Weakness

Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware subcomponent: MFT Runtime Server. Supported versions that are affected are 19.1.0.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Unable to publish image, out of disk space, ELM console reports "No free mft record for $MFT: No space left on device"

When publishing an image, the task fails with the message, "A failure occurred while publishing the Layered Image: An error occurred while compositing the layer or image. Please check the available disk space on the local storage or the size of the target image." Also, in the ELM console, you mig...

libfsntfs information disclosure vulnerability (CNVD-2018-16497)

libfsntfs is a library for accessing the New Technology File System NTFS. An information disclosure vulnerability exists in the libfsntfsattributereadfrommft function in the libfsntfsattribute.c file in libfsntfs 2018-04-20 and earlier. An attacker can exploit this vulnerability to obtain...

libfsntfs Information Disclosure Vulnerability

libfsntfs is a library for accessing the New Technology File System NTFS. An information disclosure vulnerability exists in the libfsntfsmftentryreadattributes function in libfsntfsmftentry.c on 2018-04-20 and earlier. An attacker can exploit this vulnerability to obtain information via specially...

libfsntfs information disclosure vulnerability (CNVD-2018-16521)

libfsntfs is a library for accessing the New Technology File System NTFS. An information disclosure vulnerability exists in the libfsntfsmftentryreadheader function in libfsntfsmftentry.c on 2018-04-20 and earlier. An attacker can exploit this vulnerability to obtain information via specially...

UBUNTU-CVE-2018-11729

DISPUTED The libfsntfsmftentryreadheader function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on...