Vulnerability Description
TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tibco | Managed File Transfer Internet Server | <= 7.2.4 |
| Tibco | Vault | <= 2.0.0 |
| Tibco | Managed File Transfer Command Center | <= 7.2.4 |
| Tibco | Slingshot | <= 1.9.3 |
Related Weaknesses (CWE)
References
- http://www.securitytracker.com/id/1033678
- http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txtVendor Advisory
- http://www.tibco.com/mk/advisory.jspVendor Advisory
- http://www.securitytracker.com/id/1033678
- http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txtVendor Advisory
- http://www.tibco.com/mk/advisory.jspVendor Advisory
FAQ
What is CVE-2015-5711?
CVE-2015-5711 is a vulnerability with a CVSS score of 4.0 (MEDIUM). TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain s...
How severe is CVE-2015-5711?
CVE-2015-5711 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5711?
Check the references section above for vendor advisories and patch information. Affected products include: Tibco Managed File Transfer Internet Server, Tibco Vault, Tibco Managed File Transfer Command Center, Tibco Slingshot.