4.3

CVE-2011-3424

EPSS 0.48%
Published 19.09.2011 12:02:57
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Tibco ≫ Managed File Transfer Command Center Version <= 7.1.0

Tibco ≫ Managed File Transfer Command Center Version6.7

Tibco ≫ Managed File Transfer Command Center Version7.0

Tibco ≫ Managed File Transfer Command Center Version7.0.1

Tibco ≫ Managed File Transfer Internet Server Version <= 7.1.0

Tibco ≫ Managed File Transfer Internet Server Version6.7

Tibco ≫ Managed File Transfer Internet Server Version7.0

Tibco ≫ Managed File Transfer Internet Server Version7.0.1

Tibco ≫ Slingshot Version <= 1.8.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.48%	0.62

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://secunia.com/advisories/45976

Vendor Advisory

http://securitytracker.com/id?1026051

http://www.securityfocus.com/bid/49619

http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt

http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp

http://www.osvdb.org/75397

https://exchange.xforce.ibmcloud.com/vulnerabilities/69805

https://nvd.nist.gov/vuln/detail/CVE-2011-3424

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3424

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3424

EUVD