PT-2018-16955 · Tibco · Tibco Spotfire Analytics Platform For Aws Marketplace+1

Publicado 2018-06-27 · Atualizado 2019-10-09 · CVE-2018-5436

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0 TIBCO Spotfire Server versions up to and including 7.12.0

Description The issue affects the Spotfire server component, potentially allowing for the disclosure of information, including user and data source credentials.

Recommendations For TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Server versions up to and including 7.12.0, update to a version later than 7.12.0.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-5436

Produtos afetados

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-5436 · Nota de Segurança
• http://tibco.com/services/support/advisories · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5436 · Aviso do Fabricante
• https://tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5436 · Aviso do Fabricante