Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TIBCO Spotfire Analytics ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.
Product
TIBCO Spotfire Analytics ist eine kommerzielle Software-Plattform für Business-Intelligence-Lösungen zur systematischen Analyse von unternehmenseigenen und -fremden Daten.
Vulnerabilities 2
-
Critical 10.0
TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and r…
-
Critical 9.9
TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code Execution
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an authenticated user to trigger remote code execution …
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2019-2912
-
#1
Initiale Fassung
References
-
TIBCO Security Advisory vom 2019-09-18
https://www.tibco.com/support/advisories/2019/09/tibco-security-advisory-september-17-2019-tibco-enterprise-runtime-for-r-server-2019-11210
-
TIBCO Security Advisory vom 2019-09-18
https://www.tibco.com/support/advisories/2019/09/tibco-security-advisory-september-17-2019-tibco-enterprise-runtime-for-r-server-2019-11211