{"api_version":"1","generated_at":"2026-07-23T22:21:39+00:00","cve":"CVE-2015-5711","urls":{"html":"https://cve.report/CVE-2015-5711","api":"https://cve.report/api/cve/CVE-2015-5711.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-5711","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-5711"},"summary":{"title":"CVE-2015-5711","description":"TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request.","state":"PUBLISHED","assigner":"mitre","published_at":"2015-09-29 18:59:04","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id/1033678","name":"http://www.securitytracker.com/id/1033678","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TIBCO Slingshot Flaw in Managed File Transfer Engine Lets Remote Authenticated Users Obtain Potentially Sensitive Information - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.tibco.com/mk/advisory.jsp","name":"http://www.tibco.com/mk/advisory.jsp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Advisory | TIBCO Software","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt","name":"http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5711","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5711","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"5711","vulnerable":"1","versionEndIncluding":"7.2.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_command_center","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5711","vulnerable":"1","versionEndIncluding":"7.2.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_internet_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5711","vulnerable":"1","versionEndIncluding":"1.9.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"slingshot","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5711","vulnerable":"1","versionEndIncluding":"2.0.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"vault","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T06:59:04.202Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.tibco.com/mk/advisory.jsp"},{"name":"1033678","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1033678"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-09-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-12-06T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.tibco.com/mk/advisory.jsp"},{"name":"1033678","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1033678"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2015-5711","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt","refsource":"CONFIRM","url":"http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt"},{"name":"http://www.tibco.com/mk/advisory.jsp","refsource":"CONFIRM","url":"http://www.tibco.com/mk/advisory.jsp"},{"name":"1033678","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1033678"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2015-5711","datePublished":"2015-09-29T18:00:00.000Z","dateReserved":"2015-08-02T00:00:00.000Z","dateUpdated":"2024-08-06T06:59:04.202Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-09-29 18:59:04","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2.4","matchCriteriaId":"40ABCAA0-E373-47BE-BEA9-3FB4F023B335"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:vault:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"82671377-DB4C-41F2-945C-FECEC1B4E2ED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2.4","matchCriteriaId":"D0245F45-3F50-4477-851E-32B72775F0A1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:slingshot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.3","matchCriteriaId":"CA1A0E79-F30D-4EAD-A963-D24B31F32359"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"5711","Ordinal":"1","Title":"CVE-2015-5711","CVE":"CVE-2015-5711","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"5711","Ordinal":"1","NoteData":"TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request.","Type":"Description","Title":"CVE-2015-5711"},{"CveYear":"2015","CveId":"5711","Ordinal":"2","NoteData":"2015-09-29","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"5711","Ordinal":"3","NoteData":"2016-12-06","Type":"Other","Title":"Modified"}]}}}