PT-2018-11151 · Tibco Software · Tibco Spotfire Statistics Services

Publicado 2018-10-10 · Atualizado 2019-10-09 · CVE-2018-12410

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Statistics Services versions up to and including 7.11.0

Description The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple issues that may allow remote code execution. An attacker may be able to execute code with the permissions of the system account used to run the web server component without needing to authenticate.

Recommendations For TIBCO Spotfire Statistics Services versions up to and including 7.11.0, update to a version later than 7.11.0 to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-12410

Produtos afetados

Tibco Spotfire Statistics Services

Referências · 4

• https://tibco.com/support/advisories/2018/10/tibco-security-advisory-october-10-2018-tibco-spotfire-statistics · Nota
• http://securityfocus.com/bid/105558 · Nota
• https://osv.dev/vulnerability/CVE-2018-12410 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12410 · Nota de Segurança