PT-2018-16955 · Tibco · Tibco Spotfire Analytics Platform For Aws Marketplace+1

Published 2018-06-27 · Updated 2019-10-09 · CVE-2018-5436

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0 TIBCO Spotfire Server versions up to and including 7.12.0

Description The issue affects the Spotfire server component, potentially allowing for the disclosure of information, including user and data source credentials.

Recommendations For TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Server versions up to and including 7.12.0, update to a version later than 7.12.0.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-5436

Affected Products

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-5436 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5436 · Vendor Advisory
• https://tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5436 · Vendor Advisory