CVE-2018-18810
Estado: ModificadaCrítica (9.9)—
The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 9.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.23%
- Percentil entre todas las CVEs puntuadas: 68
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-noinfo
Referencias
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-18810",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "security@tibco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 4,
"exploitabilityScore": 2.3
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 9.9,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.1
}
]
},
"affected": [
{
"source": "security@tibco.com",
"affectedData": [
{
"vendor": "TIBCO Software Inc.",
"product": "TIBCO Managed File Transfer Command Center",
"versions": [
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "7.3.2"
},
{
"status": "affected",
"version": "8.0.0"
},
{
"status": "affected",
"version": "8.0.1"
},
{
"status": "affected",
"version": "8.0.2"
},
{
"status": "affected",
"version": "8.1.0"
}
]
},
{
"vendor": "TIBCO Software Inc.",
"product": "TIBCO Managed File Transfer Internet Server",
"versions": [
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "7.3.2"
},
{
"status": "affected",
"version": "8.0.0"
},
{
"status": "affected",
"version": "8.0.1"
},
{
"status": "affected",
"version": "8.0.2"
},
{
"status": "affected",
"version": "8.1.0"
}
]
}
]
}
],
"published": "2018-12-11T19:29:00.623",
"references": [
{
"url": "http://www.tibco.com/services/support/advisories",
"tags": [
"Vendor Advisory"
],
"source": "security@tibco.com"
},
{
"url": "https://www.tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer",
"tags": [
"Vendor Advisory"
],
"source": "security@tibco.com"
},
{
"url": "http://www.tibco.com/services/support/advisories",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0."
},
{
"lang": "es",
"value": "El componente Administrator Service de TIBCO Managed File Transfer Command Center y TIBCO Managed File Transfer Internet Server, de TIBCO Software Inc., contiene vulnerabilidades por las que un usuario autenticado con privilegios específicos puede obtener acceso a las credenciales de otros sistemas. Las versiones afectadas de los productos de TIBCO Software Inc. son TIBCO Managed File Transfer Command Center: versiones hasta e incluyendo las 7.3.2, 8.0.0, 8.0.1, 8.0.2 y 8.1.0; y TIBCO Spotfire Server: versiones hasta e incluyendo las 7.3.2, 8.0.0, 8.0.1, 8.0.2 y la 8.1.0."
}
],
"lastModified": "2026-06-17T01:47:56.823",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21F228D8-402B-4B6D-9E0A-37F6538B597F",
"versionEndIncluding": "7.3.2"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "246841DD-1352-4061-8B81-D5F3616A6874",
"versionEndIncluding": "8.0.2",
"versionStartIncluding": "8.0.0"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_command_center:8.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E51059F6-1469-429F-B657-63576247DC0F"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "867C572B-FB24-4B54-9E45-32AE65829D52",
"versionEndIncluding": "7.3.2"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EB7DCD4-8448-4AA5-B2C5-B81EC8777E8A",
"versionEndIncluding": "8.0.2",
"versionStartIncluding": "8.0.0"
},
{
"criteria": "cpe:2.3:a:tibco:managed_file_transfer_internet_server:8.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A46E91A2-F6FB-4C28-9C61-2A7B18F12237"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@tibco.com"
}