Overview
- Description
- The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of configured authentication mechanisms. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0.
- Source
- security@tibco.com
- NVD status
- Modified
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-287
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1D10198-A17E-432F-BEB4-F98A8A067839",
"versionEndIncluding": "10.0.0"
},
{
"criteria": "cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA796C00-8493-40A3-BE34-3B5703194E7A",
"versionEndIncluding": "7.10.1"
},
{
"criteria": "cpe:2.3:a:tibco:spotfire_server:7.11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F60AE38F-9603-47B1-9451-6A9B9D8FC065"
},
{
"criteria": "cpe:2.3:a:tibco:spotfire_server:7.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08AE8942-B051-4142-BFAE-5D47B883B7A7"
},
{
"criteria": "cpe:2.3:a:tibco:spotfire_server:7.12.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F59A46F-9E34-4354-AB7D-73A253014BA9"
},
{
"criteria": "cpe:2.3:a:tibco:spotfire_server:7.13.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97B691A6-B273-4880-AD61-53169C4C3CEC"
},
{
"criteria": "cpe:2.3:a:tibco:spotfire_server:7.14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47E57AE2-D98C-4231-9E56-A5EE8B5BC0AF"
}
],
"operator": "OR"
}
]
}
]