The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected includes database, JMX, LDAP, Windows service account, and user credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Statistics Services: versions up to and including 7.11.1; 10.0.0.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/108347 | Broken Link Third Party Advisory VDB Entry |
| http://www.tibco.com/services/support/advisories | Vendor Advisory |
| https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-statistics-services-2019-11204 | Vendor Advisory |
| http://www.securityfocus.com/bid/108347 | Broken Link Third Party Advisory VDB Entry |
| http://www.tibco.com/services/support/advisories | Vendor Advisory |
| https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-statistics-services-2019-11204 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/108347 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.tibco.com/services/support/advisories - Vendor Advisory | |
| References | () https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-statistics-services-2019-11204 - Vendor Advisory |
Information
Published : 2019-05-14 20:29
Updated : 2024-11-21 04:20
NVD link : CVE-2019-11204
Mitre link : CVE-2019-11204
CVE.ORG link : CVE-2019-11204
JSON object : View
Products Affected
tibco
- spotfire_statistics_services
CWE