CVE-2020-9412critical

CVE-2020-9412: critical vulnerability in TIBCO Managed File Transfer Platform Server…

TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

Published · Updated

Follow this CVE+ Monitor TIBCO Managed File Transfer Platform Server for IBM i

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 2.3%
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
TIBCO Software Inc. · TIBCO Managed File Transfer Platform Server for IBM i
Related CVEs — TIBCO Managed File Transfer Platform Server…

In the same product, most dangerous first.

CVE-2020-9411CRITICALTIBCO Managed File Transfer Platform Server for IBM i Authentication BypassEPSS 1.4%