PT-2018-16956 · Tibco · Tibco Spotfire Analytics Platform For Aws Marketplace+4

Publicado 2018-06-27 · Atualizado 2019-10-09 · CVE-2018-5437

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analyst versions up to and including 7.12.0 TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0 TIBCO Spotfire Deployment Kit versions up to and including 7.12.0 TIBCO Spotfire Desktop versions up to and including 7.12.0 TIBCO Spotfire Desktop Language Packs versions up to and including 7.12.0

Description The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components contain multiple vulnerabilities that may allow for unauthorized information disclosure.

Recommendations For TIBCO Spotfire Analyst versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Deployment Kit versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Desktop versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Desktop Language Packs versions up to and including 7.12.0, update to a version later than 7.12.0.

Correção

Identificadores relacionados

CVE-2018-5437

Produtos afetados

Tibco Spotfire Analyst

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Deployment Kit

Tibco Spotfire Desktop

Tibco Spotfire Desktop Language Packs

Referências · 4

• https://tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5437 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5437 · Nota de Segurança
• http://tibco.com/services/support/advisories · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5437 · Aviso do Fabricante