CVE-2019-8989

· MEDIUMModified

← All CVEs

CVSS v3.1

4.3

EPSS

1.23%

Published

Mar 26, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account to look like a different user in the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected Products (2)

tibco · data_science_for_awsvulnerable

tibco · spotfire_data_sciencevulnerable

References (6)

http://www.securityfocus.com/bid/107608

Third Party AdvisoryVDB Entry

http://www.tibco.com/services/support/advisories

Vendor Advisory

https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-26-2019-tibco-spotfire-data-science-2019-8989

Vendor Advisory