CVE-2020-9412: TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution
First published: Tue Jun 09 2020(Updated: )
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
Credit: security@tibco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO Managed File Transfer Platform Server | <=7.1.0 | |
| TIBCO Managed File Transfer Platform Server | =8.0.0 | |
| IBM i |
Remedy
TIBCO has released updated versions of the affected components which address these issues. TIBCO Managed File Transfer Platform Server for IBM i versions 7.1.0 and below update to version 7.1.1 or higher TIBCO Managed File Transfer Platform Server for IBM i version 8.0.0 update to version 8.0.1 or higher
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9412?
CVE-2020-9412 is a vulnerability in TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server that allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer.
What is the severity of CVE-2020-9412?
CVE-2020-9412 has a severity rating of critical, with a severity value of 9.8.
Which versions of TIBCO Managed File Transfer Platform Server are affected by CVE-2020-9412?
The affected versions of TIBCO Managed File Transfer Platform Server are 7.1.0 and 8.0.0.
How can the vulnerability be exploited?
The vulnerability in TIBCO Managed File Transfer Platform Server can be exploited by executing arbitrary commands after a failed file transfer.
Are IBM i systems affected by CVE-2020-9412?
No, IBM i systems are not vulnerable to CVE-2020-9412.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- agent/tags
- agent/first-publish-date
- agent/description
- vendor/tibco
- canonical/tibco managed file transfer platform server
- version/tibco managed file transfer platform server/7.1.0
- version/tibco managed file transfer platform server/8.0.0
- vendor/ibm
- canonical/ibm i