PT-2018-16956 · Tibco · Tibco Spotfire Analytics Platform For Aws Marketplace+4

Published 2018-06-27 · Updated 2019-10-09 · CVE-2018-5437

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analyst versions up to and including 7.12.0 TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0 TIBCO Spotfire Deployment Kit versions up to and including 7.12.0 TIBCO Spotfire Desktop versions up to and including 7.12.0 TIBCO Spotfire Desktop Language Packs versions up to and including 7.12.0

Description The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components contain multiple vulnerabilities that may allow for unauthorized information disclosure.

Recommendations For TIBCO Spotfire Analyst versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Deployment Kit versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Desktop versions up to and including 7.12.0, update to a version later than 7.12.0. For TIBCO Spotfire Desktop Language Packs versions up to and including 7.12.0, update to a version later than 7.12.0.

Fix

Related Identifiers

CVE-2018-5437

Affected Products

Tibco Spotfire Analyst

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Deployment Kit

Tibco Spotfire Desktop

Tibco Spotfire Desktop Language Packs

References · 4

• https://tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5437 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5437 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5437 · Vendor Advisory