CVE-2014-5285

Опубликовано: 04 сент. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.

Ссылки

http://www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*

Версия до 4.5.1 (включая)

cpe:2.3:a:tibco:spotfire_server:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_server:6.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.0051

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-hm6p-rhcp-2rrf

github

больше 3 лет назад