CVE-2015-5711 TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain s...
MediumCVSS 4.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco managed file transfer internet server | <= 7.2.4 | No fix listed |
| tibco vault | <= 2.0.0 | No fix listed |
| tibco managed file transfer command center | <= 7.2.4 | No fix listed |
| tibco slingshot | <= 1.9.3 | No fix listed |
References
- 1033678 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory