Skip to content
OpenAdvisories
High WID-SEC-2023-1087 1 CVE

TIBCO Spotfire Statistics Services: Schwachstelle ermöglicht Manipulation von Dateien

Published Apr 26, 2023 · Updated Apr 26, 2023 · de-DE

Vendor: TIBCO Software Product: Spotfire Statistics Services Product: Spotfire Statistics Services < 11.4.11 Product: Spotfire Statistics Services < 12.0.3 Product: Spotfire Statistics Services < 12.3.0 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in TIBCO Spotfire Statistics Services ausnutzen, um Dateien zu manipulieren.

Product

TIBCO Spotfire Statistics Services ist ein "light-weight" Server, der eine Kommunikationsschicht und eine Serviceschicht, sowie einen S-PLUS oder R "engine pool" und andere Features bietet.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-29268

    TIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability

    The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system. Affected…

    TIBCO Software TIBCO Spotfire Statistics Services

Revision history

  1. #1

    Initiale Fassung

References