Vulnerability Details CVE-2018-18814
The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of configured authentication mechanisms. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 82.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 7.5
References
- http://www.securityfocus.com/bid/106635
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18814
- http://www.securityfocus.com/bid/106635
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18814
Products affected by CVE-2018-18814
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:-
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:10.0.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:6.5
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.0.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.0.2
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.14.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.14.1
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.8.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.8.1
-
cpe:2.3:a:tibco:spotfire_server:4.5.1
-
cpe:2.3:a:tibco:spotfire_server:5.0.2
-
cpe:2.3:a:tibco:spotfire_server:5.5.1
-
cpe:2.3:a:tibco:spotfire_server:5.5.2
-
cpe:2.3:a:tibco:spotfire_server:5.5.3
-
cpe:2.3:a:tibco:spotfire_server:6.0.2
-
cpe:2.3:a:tibco:spotfire_server:6.0.3
-
cpe:2.3:a:tibco:spotfire_server:6.0.4
-
cpe:2.3:a:tibco:spotfire_server:6.5.0
-
cpe:2.3:a:tibco:spotfire_server:6.5.1
-
cpe:2.3:a:tibco:spotfire_server:6.5.2
-
cpe:2.3:a:tibco:spotfire_server:6.5.3
-
cpe:2.3:a:tibco:spotfire_server:7.0.0
-
cpe:2.3:a:tibco:spotfire_server:7.0.1
-
cpe:2.3:a:tibco:spotfire_server:7.0.2
-
cpe:2.3:a:tibco:spotfire_server:7.10.0
-
cpe:2.3:a:tibco:spotfire_server:7.10.1
-
cpe:2.3:a:tibco:spotfire_server:7.11.0
-
cpe:2.3:a:tibco:spotfire_server:7.11.1
-
cpe:2.3:a:tibco:spotfire_server:7.12.0
-
cpe:2.3:a:tibco:spotfire_server:7.13.0
-
cpe:2.3:a:tibco:spotfire_server:7.14.0
-
cpe:2.3:a:tibco:spotfire_server:7.5.0
-
cpe:2.3:a:tibco:spotfire_server:7.5.1
-
cpe:2.3:a:tibco:spotfire_server:7.6.0
-
cpe:2.3:a:tibco:spotfire_server:7.6.1
-
cpe:2.3:a:tibco:spotfire_server:7.7.0
-
cpe:2.3:a:tibco:spotfire_server:7.7.1
-
cpe:2.3:a:tibco:spotfire_server:7.8.0
-
cpe:2.3:a:tibco:spotfire_server:7.8.1
-
cpe:2.3:a:tibco:spotfire_server:7.8.2
-
cpe:2.3:a:tibco:spotfire_server:7.9.0
-
cpe:2.3:a:tibco:spotfire_server:7.9.1