CVE-2018-18810

TIBCO Managed File Transfer Credentials Disclosure

State
Published
Severity
6.8 Medium
Published
Dec 11, 2018
Updated
Sep 17, 2024
Reserved
Oct 29, 2018

Read the record on cve.org

Description

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.

Scores

CVSSScoreVectorSource
3.06.8 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Ntibco

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
TIBCO Managed File Transfer Command CenterTIBCO Software Inc.
  • 7.3.2 and earlierAffected
  • 8.0.0Affected
  • 8.0.1Affected
  • 8.0.2Affected
  • 8.1.0Affected
TIBCO Managed File Transfer Internet ServerTIBCO Software Inc.
  • 7.3.2 and earlierAffected
  • 8.0.0Affected
  • 8.0.1Affected
  • 8.0.2Affected
  • 8.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.