CVE-2020-9414: TIBCO Managed File Transfer reflected XSS vulerability
The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user. The session identifier when replayed could provide administrative rights or file transfer permissions to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.2.1 and below and TIBCO Managed File Transfer Internet Server: versions 8.2.1 and below.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-9414?
CVE-2020-9414 is a vulnerability in the MFT admin service component of TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server.
How severe is CVE-2020-9414?
CVE-2020-9414 has a severity rating of critical, with a score of 8.8
What is the affected software for CVE-2020-9414?
The affected software for CVE-2020-9414 is TIBCO Managed File Transfer Command Center version up to 8.2.1 and TIBCO Managed File Transfer Internet Server version up to 8.2.1.
How can an authenticated user exploit CVE-2020-9414?
An authenticated user with specific permissions can exploit CVE-2020-9414 to obtain the session identifier of another user.
How can I fix CVE-2020-9414?
To fix CVE-2020-9414, it is recommended to apply the latest security patches provided by TIBCO Software Inc. and keep the affected software up to date.