{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-09-13T00:00:00", "descriptions": [{"lang": "en", "value": "Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "45976", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/45976"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt"}, {"name": "1026051", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1026051"}, {"name": "managed-file-session-hijacking(69805)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69805"}, {"name": "75397", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/75397"}, {"name": "49619", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/49619"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-3424", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "45976", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/45976"}, {"name": "http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp", "refsource": "CONFIRM", "url": "http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp"}, {"name": "http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt", "refsource": "CONFIRM", "url": "http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt"}, {"name": "1026051", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1026051"}, {"name": "managed-file-session-hijacking(69805)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69805"}, {"name": "75397", "refsource": "OSVDB", "url": "http://www.osvdb.org/75397"}, {"name": "49619", "refsource": "BID", "url": "http://www.securityfocus.com/bid/49619"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-3424", "datePublished": "2011-09-17T10:00:00", "dateReserved": "2011-09-12T00:00:00", "dateUpdated": "2017-08-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "E930A722-AF77-41A8-BC3A-3A62A893A4F8", "versionEndIncluding": "7.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:6.7:*:*:*:*:*:*:*", "matchCriteriaId": "38ED1A3D-E9D9-4303-B415-B59E001AF66C", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "B915038A-19CD-46FA-AD4D-363FC1318BC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "17F7866F-CA3B-473B-B97C-708094FA1FE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "C273EFE4-041D-4BE6-AD39-3AD18F2041A3", "versionEndIncluding": "7.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:6.7:*:*:*:*:*:*:*", "matchCriteriaId": "CEF0D77C-384A-4637-A536-FFFEB98FA5AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "FF267842-78F2-4116-B9C2-AFC253FFC6D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "6E9A0D38-D999-43F7-87D2-A94B1783BA03", "vulnerable": true}, {"criteria": "cpe:2.3:a:tibco:slingshot:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ECCFBCC-8AAF-4058-ACDF-FF38B6A0EAD3", "versionEndIncluding": "1.8.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de fijaci\u00f3n de sesi\u00f3n en el servidor Managed File Transfer en Managed File Transfer Internet Server antes de v7.1.1 y Managed File Transfer Command Center antes de v7.1.1, y el servidor TIBCO Slingshot antes de v1.8.1, permite a atacantes remotos secuestrar sesiones web a trav\u00e9s de vectores no especificados."}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/384.html\r\n'CWE-384: Session Fixation'", "id": "CVE-2011-3424", "lastModified": "2017-08-29T01:30:11.803", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2011-09-19T12:02:57.277", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/45976"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1026051"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/75397"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/49619"}, {"source": "cve@mitre.org", "url": "http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt"}, {"source": "cve@mitre.org", "url": "http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69805"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}