Information disclosure in Tibco Spotfire Analytics Server
CVE-2012-0690
TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.
Vulnerability class: Information Disclosure
EPSS: 0.016 (74.1th percentile) — read the EPSS interpretation.
Affected products
- Tibco Spotfire_analytics_server — versions 10.0.0, 10.0.1
- Tibco Spotfire_professional
- Tibco Spotfire_server — versions 3.0.0, 3.0.1, 3.1.0
- Tibco Web_player_automation_services
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)