CVE-2014-2545 TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers to obtain sensitive i...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers to obtain sensitive information via a crafted HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco slingshot | <= 1.9.0 | No fix listed |
| tibco slingshot | = 1.7.0 | No fix listed |
| tibco slingshot | = 1.8.0 | No fix listed |
| tibco slingshot | = 1.8.1 | No fix listed |
| tibco vault | <= 1.0.0 | No fix listed |
| tibco managed file transfer command center | <= 7.2.1 | No fix listed |
| tibco managed file transfer command center | = 6.7 | No fix listed |
| tibco managed file transfer command center | = 7.0 | No fix listed |
| tibco managed file transfer command center | = 7.0.1 | No fix listed |
| tibco managed file transfer command center | = 7.1.0 | No fix listed |
| tibco managed file transfer command center | = 7.2.0 | No fix listed |
| tibco managed file transfer internet server | <= 7.2.1 | No fix listed |
| tibco managed file transfer internet server | = 6.7 | No fix listed |
| tibco managed file transfer internet server | = 7.0 | No fix listed |
| tibco managed file transfer internet server | = 7.0.1 | No fix listed |
| tibco managed file transfer internet server | = 7.1.0 | No fix listed |
| tibco managed file transfer internet server | = 7.2.0 | No fix listed |
References
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory