CVE-2020-9412
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.34% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- tibco/managed file transfer platform server
- Source
- security@tibco.com
References
- https://www.tibco.com/services/support/advisoriesMailing List, Vendor Advisory
- https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412Vendor Advisory
- https://www.tibco.com/services/support/advisoriesMailing List, Vendor Advisory
- https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.