A vulnerability classified as critical has been found in TIBCO Managed File Transfer Command Center and Managed File Transfer Internet Server 8.0.0/8.0.1 (File Transfer Software). Affected is some unknown processing. The manipulation with an unknown input leads to a access control vulnerability. CWE is classifying the issue as CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications.

The bug was discovered 10/17/2017. The weakness was released 10/17/2017 (Website). The advisory is available at tibco.com. This vulnerability is traded as CVE-2017-5531 since 01/19/2017. It is possible to launch the attack remotely. Required for exploitation is a authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Productinfo

Type

• File Transfer Software

Vendor

• TIBCO

Name

• Managed File Transfer Command Center
• Managed File Transfer Internet Server

Version

• 8.0.0
• 8.0.1

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion