CVE Feed

    Dashboard / CVE / CVE-2011-3424

    CVE-2011-3424

    Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.

    Published:Sep 17, 2011
    Last Modified:Apr 11, 2025
    EPS:Sep 17, 2011
    EPSS Score:0.00475
    CVSS Score:4.3

    Affected Products

    Vendor
    Tibco
    Product
    Managed File Transfer Command Center
    Vendor
    Tibco
    Product
    Managed File Transfer Internet Server
    Vendor
    Tibco
    Product
    Slingshot

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-22774 (CVSS 8.6) — The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command …
    CVE-2020-9414 (CVSS 8.8) — The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO …
    CVE-2020-9413 (CVSS 6.3) — The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Ma…
    CVE-2018-18810 (CVSS 6.8) — The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and T…
    CVE-2017-5531 (CVSS 8) — Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Tran…
    CVE-2015-5711 (CVSS 4) — TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, S…
    CVE-2014-7194 (CVSS 6.4) — TIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center before 7.2.4, S…
    CVE-2014-2545 (CVSS 5) — TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, S…
    CVE-2011-3423 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer In…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High