CVE-2022-22772

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-22772
The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.

8.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

8.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability : 6.8 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://www.tibco.com/services/support/advisories Vendor Advisory
https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772 Vendor Advisory
https://www.tibco.com/services/support/advisories Vendor Advisory
https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:tibco:managed_file_transfer_platform_server:*:*:*:*:*:*:*:*
OR cpe:2.3:o:ibm:z_linux:-:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*
History

21 Nov 2024, 06:47

Type Values Removed Values Added
References () https://www.tibco.com/services/support/advisories - Vendor Advisory () https://www.tibco.com/services/support/advisories - Vendor Advisory
References () https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772 - Vendor Advisory () https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772 - Vendor Advisory
CVSS v2 : 8.5
v3 : 7.5 		v2 : 8.5
v3 : 8.5
Information

Published : 2022-03-30 17:15

Updated : 2024-11-21 06:47

NVD link : CVE-2022-22772

Mitre link : CVE-2022-22772

CVE.ORG link : CVE-2022-22772

JSON object : View

Products Affected

ibm

  • z_linux

opengroup

  • unix

tibco

  • managed_file_transfer_platform_server
CWE
NVD-CWE-noinfo