description: Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications.
problem types: privilege escalation
affected:
{
product: TIBCO Managed File Transfer Command Center
vendor: TIBCO Software Inc.
versions:
status: affected, version: 8.0.0
status: affected, version: 8.0.1
}
{
product: TIBCO Managed File Transfer Internet Server
vendor: TIBCO Software Inc.
versions:
status: affected, version: 8.0.0
status: affected, version: 8.0.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:R
version: 3.0
]