CVE-2022-22772
The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.
- Score
- CVSS 3.1 8.5 High
- Status
- Modified - security@tibco.com
- Published
- 2022-03-30
- Last modified
- 2024-09-16
Affected products
- Managed File Transfer Platform Server (Tibco)
- Tibco Managed File Transfer Platform Server For Unix (Tibco Software Inc.)
- Tibco Managed File Transfer Platform Server For Zlinux (Tibco Software Inc.)
References
- https://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022…