NVD

Id
10068  
Name
CVE-2011-3424  
Description
Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-09-19  
Modified Date
2013-07-10  
Seq
2011-3424  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57754 10068 CVE-2011-3424 1026051  View
57755 10068 CVE-2011-3424 49619  View
57756 10068 CVE-2011-3424 http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt  View
57757 10068 CVE-2011-3424 http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp  View
57758 10068 CVE-2011-3424 managed-file-session-hijacking(69805)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31991 JVNDB-2011-002231 TIBCO Managed File Transfer および Slingshot における Web セッションをハイジャックされる脆弱性 TIBCO Managed File Transfer および Slingshot には、Web セッションをハイジャックされる脆弱性が存在します。 CVE-2011-3424 51331 CVE-2011-3424 10068 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002231.html 2011-09-13 2011-09-26 View