PT-2018-16954 · Tibco · Tibco Spotfire Analytics Platform For Aws Marketplace+4

Publicado 2018-06-27 · Atualizado 2019-10-09 · CVE-2018-5435

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analyst versions up to and including 7.12.0 TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0 TIBCO Spotfire Deployment Kit versions up to and including 7.12.0 TIBCO Spotfire Desktop versions up to and including 7.12.0 TIBCO Spotfire Desktop Language Packs versions up to and including 7.12.0

Description The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components contain multiple vulnerabilities that may allow for remote code execution.

Recommendations For TIBCO Spotfire Analyst versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Deployment Kit versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Desktop versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Desktop Language Packs versions up to and including 7.12.0, update to a version later than 7.12.0.

Correção

Identificadores relacionados

CVE-2018-5435

Produtos afetados

Tibco Spotfire Analyst

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Deployment Kit

Tibco Spotfire Desktop

Tibco Spotfire Desktop Language Packs

Referências · 4

• https://tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5435 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5435 · Nota de Segurança
• http://tibco.com/services/support/advisories · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5435 · Aviso do Fabricante