CVE-2022-22772: TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability
The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-22772?
CVE-2022-22772 is a Remote Code Execution (RCE) vulnerability in the cfsend, cfrecv, and CyberResp components of TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux.
How severe is CVE-2022-22772?
CVE-2022-22772 has a severity rating of 7.5 out of 10 (high severity).
Which software is affected by CVE-2022-22772?
TIBCO Managed File Transfer Platform Server for UNIX versions up to and excluding 8.1.1 are affected.
How can an attacker exploit CVE-2022-22772?
CVE-2022-22772 requires a low privileged attacker with network access to exploit the vulnerability and execute remote code.
Is IBM z/Linux or Opengroup Unix affected by CVE-2022-22772?
No, IBM z/Linux and Opengroup Unix are not vulnerable to CVE-2022-22772.
How can I fix CVE-2022-22772?
To fix CVE-2022-22772, it is recommended to upgrade to a version of TIBCO Managed File Transfer Platform Server for UNIX that is above 8.1.1.