PT-2014-7830 · Tibco · Tibco Spotfire Web Player+2

Publicado 2014-11-21 · Atualizado 2014-11-21 · CVE-2014-7195

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Web Player versions 6.0.x through 6.0.1 TIBCO Spotfire Web Player versions 6.5.x through 6.5.1 TIBCO Spotfire Deployment Kit versions 6.0.x through 6.0.1 TIBCO Spotfire Deployment Kit versions 6.5.x through 6.5.1 Silver Fabric Enabler for Spotfire Web Player version 1.6.0 and earlier

Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors.

Recommendations For TIBCO Spotfire Web Player versions 6.0.x through 6.0.1, update to version 6.0.2 or later. For TIBCO Spotfire Web Player versions 6.5.x through 6.5.1, update to version 6.5.2 or later. For TIBCO Spotfire Deployment Kit versions 6.0.x through 6.0.1, update to version 6.0.2 or later. For TIBCO Spotfire Deployment Kit versions 6.5.x through 6.5.1, update to version 6.5.2 or later. For Silver Fabric Enabler for Spotfire Web Player version 1.6.0 and earlier, update to version 1.6.1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-7195

Produtos afetados

Silver Fabric Enabler For Spotfire Web Player

Tibco Spotfire Deployment Kit

Tibco Spotfire Web Player

Referências · 3

• http://tibco.com/mk/advisory.jsp · Aviso do Fabricante
• http://tibco.com/assets/blta5b5c969aff51474/2014-009-spotfire-advisory.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-7195 · Nota de Segurança