CVE-2018-5436 — Sensitive Information Exposure in Software INC Tibco Spotfire Analytics Platform FOR AWS Marketplace

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
8.8HIGHNVD
CNA6.5
EPSS
0.2%
top 59.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Tibco Software INC Tibco Spotfire Analytics Platform FOR AWS MarketplaceTibco Software INC Tibco Spotfire ServerTibco Spotfire Analytics Platform FOR AWS+1 more
Timeline
PublishedJun 27
Latest updateMay 13

Description

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5tibco_software_inc/tibco_spotfire_serverunspecified — 7.8.1+4

🔴Vulnerability Details

2
GHSA
GHSA-3xc7-x46v-p5qp: The Spotfire server component of TIBCO Software Inc↗2022-05-13
▶
CVEList
TIBCO Spotfire Server information disclosure vulnerabilities↗2018-06-27
▶
CVE-2018-5436 — Sensitive Information Exposure | cvebase