CVE-2022-22772

TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability

High · published March 30, 2022

CVSS v3.1
8.5
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02340 · 83.5th percentile
Published
2022-03-30T16:40Z
EPSS history
Timeline
  • 30 MAR 16:40Z
    TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability
    cvelistv5