Multiple TIBCO Spotfire Products Multiple Information Disclosure Vulnerabilities
9 Feb. 2016
Summary
Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting an URL
Credit:
The information has been provided by The vendor reported these issues..
Vulnerable Systems:
* TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1
Immune Systems:
* TIBCO Spotfire Server 5.5.x after 5.5.4, 6.0.x after 6.0.5, 6.5.x after 6.5.4, and 7.0.x after 7.0.1
Multiple TIBCO Spotfire Products are prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to gain access to sensitive information; this may lead to further attacks.
