Skip to content
OpenAdvisories
Medium · 5.0 CVE-2019-8989 EUVD-2019-18376GHSA-xq29-5vxx-327w

TIBCO Spotfire Data Science Spoofing Vulnerability

Published Mar 26, 2019 · Updated Sep 17, 2024 · Assigned by tibco

Description

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account to look like a different user in the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO Data Science for AWS unspecified – ≤ 6.4.0 —
TIBCO Software TIBCO Spotfire Data Science unspecified – ≤ 6.4.0 —

References