PT-2014-6391 · Tibco · Tibco Spotfire Server

Published 2014-09-04 · Updated 2014-09-05 · CVE-2014-5285

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Server versions prior to 4.5.2 TIBCO Spotfire Server versions 5.0.x prior to 5.0.3 TIBCO Spotfire Server versions 5.5.x prior to 5.5.2 TIBCO Spotfire Server versions 6.0.x prior to 6.0.3 TIBCO Spotfire Server versions 6.5.x prior to 6.5.1

Description The issue allows remote attackers to gain privileges, obtain sensitive information, or modify data via unknown vectors. This is related to an unspecified vulnerability in the Authentication Module.

Recommendations For versions prior to 4.5.2, update to version 4.5.2 or later. For versions 5.0.x prior to 5.0.3, update to version 5.0.3 or later. For versions 5.5.x prior to 5.5.2, update to version 5.5.2 or later. For versions 6.0.x prior to 6.0.3, update to version 6.0.3 or later. For versions 6.5.x prior to 6.5.1, update to version 6.5.1 or later.

Fix

Related Identifiers

CVE-2014-5285

Affected Products

Tibco Spotfire Server

References · 3

• http://tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-5285 · Security Note
• http://tibco.com/mk/advisory.jsp · Vendor Advisory