CVE-2022-22772 HIGH

CVE-2022-22772: TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability

Vendor Tibco Software Inc.
Product TIBCO Managed File Transfer Platform Server for UNIX
Published March 30, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.

Key dates

02Disclosure timeline

March 30, 2022 CVE published
September 16, 2024 Record updated