Paper/Archive/CVE-2020-9412

CVE-2020-9412

TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for IBM i — TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

EPSS 2%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 83.7.837 × 2016.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.

Affected

ProductAffectedFixed inSource

TIBCO Managed File Transfer Platform Server for IBM iunspecified – 7.1.0–CNA

TIBCO Managed File Transfer Platform Server for IBM i8.0.0–CNA

Scores by source

tibco (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftibco.com/services/support/advisories reftibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412