cbcvebase.
CVE-2018-18814
published 2019-01-16

CVE-2018-18814: The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains…

PriorityP263critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
3.10%
86.1th percentile
The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of configured authentication mechanisms. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0.

Affected

14 ranges
VendorProductVersion rangeFixed in
tibcospotfire_analytics_platform_for_aws<= 10.0.0—
tibcospotfire_server<= 7.10.1—
tibcospotfire_server——
tibcospotfire_server——
tibcospotfire_server——
tibcospotfire_server——
tibcospotfire_server——
tibco_software_inctibco_spotfire_analytics_platform_for_aws_marketplaceunspecified – 10.0.0—
tibco_software_inctibco_spotfire_server——
tibco_software_inctibco_spotfire_server——
tibco_software_inctibco_spotfire_server——
tibco_software_inctibco_spotfire_server——
tibco_software_inctibco_spotfire_server——
tibco_software_inctibco_spotfire_serverunspecified – 7.10.1—

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.