CVE-2011-3424

Published: Sep 19, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected (9)

Products: Tibco: Managed File Transfer Command Center, Managed File Transfer Internet Server, Slingshot

Tibco

3 products

Managed File Transfer Command Center

Managed File Transfer Internet Server

Slingshot

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Tibco Managed File Transfer Command Center	Up to 7.1.0
Tibco Managed File Transfer Command Center	Version 6.7
Tibco Managed File Transfer Command Center	Version 7.0.1
Tibco Managed File Transfer Command Center	Version 7.0
Tibco Managed File Transfer Internet Server	Up to 7.1.0
Tibco Managed File Transfer Internet Server	Version 6.7
Tibco Managed File Transfer Internet Server	Version 7.0.1
Tibco Managed File Transfer Internet Server	Version 7.0
Tibco Slingshot	Up to 1.8.0