Vulnerability in IBM I
CVE-2020-9412
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.023 (83.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 83rd percentile — 83.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.023 · newest: 0.023 · change: 0.000
Affected products
- IBM I
- Tibco Managed File Transfer Platform Server — versions 8.0.0
- Tibco Software Inc. Managed File Transfer Platform Server For IBM I — versions unspecified, 8.0.0
References
- www.tibco.com/services/support/advisories (Mailing List, Vendor Advisory)
- www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-ti… (Vendor Advisory)
Frequently asked questions
- What is CVE-2020-9412?
- CVE-2020-9412 is a critical-severity vulnerability in IBM I. CVSS score: 10.0/10. Published 2020-06-09.
- How severe is CVE-2020-9412?
- Critical severity. CVSS v3 base score is 10.0 out of 10.