CVE-2018-18810

TIBCO Managed File Transfer Credentials Disclosure

Medium · published December 11, 2018

CVSS v3.0
6.8
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01230 · 68.7th percentile
Published
2018-12-11T20:00Z
EPSS history
Timeline
  • 11 DEC 20:00Z
    TIBCO Managed File Transfer Credentials Disclosure
    cvelistv5