Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2022-22772

TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability

Description

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for UNIX

  • unspecified to ≤ 8.1.0affected

TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for z/Linux

  • unspecified to ≤ 8.1.0affected

References