PT-2014-6391 · Tibco · Tibco Spotfire Server

Publicado 2014-09-04 · Atualizado 2014-09-05 · CVE-2014-5285

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Server versions prior to 4.5.2 TIBCO Spotfire Server versions 5.0.x prior to 5.0.3 TIBCO Spotfire Server versions 5.5.x prior to 5.5.2 TIBCO Spotfire Server versions 6.0.x prior to 6.0.3 TIBCO Spotfire Server versions 6.5.x prior to 6.5.1

Description The issue allows remote attackers to gain privileges, obtain sensitive information, or modify data via unknown vectors. This is related to an unspecified vulnerability in the Authentication Module.

Recommendations For versions prior to 4.5.2, update to version 4.5.2 or later. For versions 5.0.x prior to 5.0.3, update to version 5.0.3 or later. For versions 5.5.x prior to 5.5.2, update to version 5.5.2 or later. For versions 6.0.x prior to 6.0.3, update to version 6.0.3 or later. For versions 6.5.x prior to 6.5.1, update to version 6.5.1 or later.

Correção

Identificadores relacionados

CVE-2014-5285

Produtos afetados

Tibco Spotfire Server

Referências · 3

• http://tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-5285 · Nota de Segurança
• http://tibco.com/mk/advisory.jsp · Aviso do Fabricante