CVE-2011-3424
Published Sep 19, 2011
Last updated 7 years ago
Overview
- Description
- Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Evaluator
- Comment
- Per: http://cwe.mitre.org/data/definitions/384.html 'CWE-384: Session Fixation'
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E930A722-AF77-41A8-BC3A-3A62A893A4F8",
"versionEndIncluding": "7.1.0"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38ED1A3D-E9D9-4303-B415-B59E001AF66C"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B915038A-19CD-46FA-AD4D-363FC1318BC6"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17F7866F-CA3B-473B-B97C-708094FA1FE0"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C273EFE4-041D-4BE6-AD39-3AD18F2041A3",
"versionEndIncluding": "7.1.0"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEF0D77C-384A-4637-A536-FFFEB98FA5AC"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF267842-78F2-4116-B9C2-AFC253FFC6D4"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E9A0D38-D999-43F7-87D2-A94B1783BA03"
},
{
"criteria": "cpe:2.3:a:tibco:slingshot:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ECCFBCC-8AAF-4058-ACDF-FF38B6A0EAD3",
"versionEndIncluding": "1.8.0"
}
],
"operator": "OR"
}
]
}
]