Vulnerability · Published Jun 9, 2020 · Assigned by tibco

CVE-2020-9412TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

Critical 10.0

In plain English

A critical-severity security flaw in TIBCO Managed File Transfer Platform Server for IBM i from TIBCO Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 84% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)2.3%top 16.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.

Affected products (as reported)

Vendor	Product	Versions
TIBCO Software Inc.	TIBCO Managed File Transfer Platform Server for IBM i	unspecified – through 7.1.08.0.0

References

https://www.tibco.com/services/support/advisories x_refsource_CONFIRM
https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412 x_refsource_CONFIRM