Vulnerability Intelligence Report
TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution
CVE-2020-9412
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
Exploitability:3.9
Impact Score:6.1
EPSS Probability:2.34%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| TIBCO Software Inc. | TIBCO Managed File Transfer Platform Server for IBM i | unspecified <= 7.1.0 (affected), 8.0.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.345%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | TIBCO Software Inc. · Vendor · USA |
| Reserved | 2020-02-26T00:00:00 |
| Published | 2020-06-09T17:00:21 |
| Patch Date | 2020-06-09 |
| Last Updated | 2024-09-17T00:35:28 |
Community Chatter & Buzz