CVE-2011-3133 — Spotfire Analytics Server vulnerability

2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 40.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tibco Spotfire Analytics ServerTibco Spotfire Server
Timeline
PublishedSep 2
Latest updateMay 17

Description

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDtibco/spotfire_server6 versions+5

🔴Vulnerability Details

1
GHSA
GHSA-389m-cgpc-f2xq: Session fixation vulnerability in TIBCO Spotfire Server 3↗2022-05-17
▶