Skip to content
OpenAdvisories
High · 8.5 CVE-2022-22772 EUVD-2022-27915GHSA-c75j-q9hh-ppx7

TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability

Published Mar 30, 2022 · Updated Sep 16, 2024 · Assigned by tibco

Description

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO Managed File Transfer Platform Server for UNIX unspecified – ≤ 8.1.0 —
TIBCO Software TIBCO Managed File Transfer Platform Server for z/Linux unspecified – ≤ 8.1.0 —

References