CRITICAL✓ PATCH🇬🇧 English

CVE-2020-9412

CVSS 10.0v3.1pub. 2020-06-09upd. 2024-11-21

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • IBM I

    OS
    Ibm
    wszystkie wersje

  • Tibco Managed File Transfer Platform Server

    APP
    Tibco
    8.0.0≤ 7.1.0
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2025-36038CRITICAL9.0PL ✓ten sam produkt

RCE w IBM WebSphere Application Server przez niebezpieczną deserializację

CVE-2020-9411CRITICAL10.0ten sam produkt

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i con...

CVE-2026-8646HIGH7.4ten sam produkt

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 2...

CVE-2026-10845HIGH7.3ten sam produkt

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain u...

CVE-2026-8858HIGH7.5ten sam produkt

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code ex...