Information disclosure in Tibco Managed File Transfer Command Center
CVE-2014-2545
TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers to obtain sensitive information via a crafted HTTP request.
Vulnerability class: Information Disclosure
EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.
Affected products
- Tibco Managed_file_transfer_command_center — versions 6.7, 7.0, 7.0.1
- Tibco Managed_file_transfer_internet_server — versions 6.7, 7.0, 7.0.1
- Tibco Slingshot — versions 1.7.0, 1.8.0, 1.8.1
- Tibco Vault
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)