CVE-2012-0690

Опубликовано: 13 мар. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.

Ссылки

http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp
Vendor Advisory
http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:spotfire_analytics_server:10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_analytics_server:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:3.3.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:tibco:web_player_automation_services:*:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:tibco:spotfire_professional:*:*:*:*:*:*:*:*

Версия до 4.0.1 (включая)

EPSS

Процентиль: 44%

0.00218

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-rr5c-m8q3-2x6w

github

больше 3 лет назад