Lucene search

[email protected]CVE-2014-5285

HistorySep 04, 2014 - 10:55 a.m.

CVE-2014-5285

2014-09-0410:55:07

[email protected]

web.nvd.nist.gov

cve-2014-5285

tibco spotfire server

authentication module

remote attackers

gain privileges

sensitive information

modify data

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.

Affected configurations

NVD

Node

tibcospotfire_serverRange≤4.5.1

tibcospotfire_serverMatch4.5.0

tibcospotfire_serverMatch5.0.0

tibcospotfire_serverMatch5.0.1

tibcospotfire_serverMatch5.0.2

tibcospotfire_serverMatch5.5.0

tibcospotfire_serverMatch5.5.1

tibcospotfire_serverMatch6.0.0

tibcospotfire_serverMatch6.0.1

tibcospotfire_serverMatch6.0.2

tibcospotfire_serverMatch6.5.0

CPENameOperatorVersion
tibco:spotfire_servertibco spotfire serverle4.5.1
tibco:spotfire_servertibco spotfire servereq4.5.0
tibco:spotfire_servertibco spotfire servereq5.0.0
tibco:spotfire_servertibco spotfire servereq5.0.1
tibco:spotfire_servertibco spotfire servereq5.0.2
tibco:spotfire_servertibco spotfire servereq5.5.0
tibco:spotfire_servertibco spotfire servereq5.5.1
tibco:spotfire_servertibco spotfire servereq6.0.0
tibco:spotfire_servertibco spotfire servereq6.0.1
tibco:spotfire_servertibco spotfire servereq6.0.2

CPE	Name	Operator	Version
tibco:spotfire_server	tibco spotfire server	le	4.5.1
tibco:spotfire_server	tibco spotfire server	eq	4.5.0
tibco:spotfire_server	tibco spotfire server	eq	5.0.0
tibco:spotfire_server	tibco spotfire server	eq	5.0.1
tibco:spotfire_server	tibco spotfire server	eq	5.0.2
tibco:spotfire_server	tibco spotfire server	eq	5.5.0
tibco:spotfire_server	tibco spotfire server	eq	5.5.1
tibco:spotfire_server	tibco spotfire server	eq	6.0.0
tibco:spotfire_server	tibco spotfire server	eq	6.0.1
tibco:spotfire_server	tibco spotfire server	eq	6.0.2

Rows per page:

1-10 of 111

References

www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt

www.tibco.com/mk/advisory.jsp

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Related for CVE-2014-5285

cvelist1 prion1 nvd1 nessus1