Vulnerability · Published Mar 30, 2022 · Assigned by tibco
CVE-2022-22772TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability
High 8.5
In plain English
A high-severity security flaw in TIBCO Managed File Transfer Platform Server for UNIX from TIBCO Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 84% of all known vulnerabilities).
Official description
The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TIBCO Software Inc. | TIBCO Managed File Transfer Platform Server for UNIX | unspecified – through 8.1.0 |
| TIBCO Software Inc. | TIBCO Managed File Transfer Platform Server for z/Linux | unspecified – through 8.1.0 |