CVE:CVE-2020-9414
CNNVD:CNNVD-202006-1880
TIBCO Software Managed File Transfer Command Center和TIBCO Software Managed File Transfer Internet Server都是美国TIBCO Software公司的产品。TIBCO Software Managed File Transfer Command Center是一套企业文件传输管理解决方案。TIBCO Software Managed File Transfer Internet Server是一款企业文件传输服务器。
TIBCO Software Managed File Transfer Command Center 8.2.1及之前版本和TIBCO Software Managed File Transfer Internet Server 8.2.1及之前版本中的MFT admin服务组件存在安全漏洞。攻击者可利用该漏洞获取其他用户的会话标识符，进而获取管理权限或转发文件。
solution:Upgrade tibco managed_file_transfer_command_center to a higher version than 8.2.1,and avoid the version (,8.2.1); Upgrade tibco managed_file_transfer_internet_server to a higher version than 8.2.1,and avoid the version (,8.2.1)