Information disclosure in Tibco Silver Fabric Enabler
CVE-2014-7195
Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for Spotfire Web Player before 1.6.1 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Vulnerability class: Information Disclosure
EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.
Affected products
- Tibco Silver_fabric_enabler
- Tibco Spotfire_deployment_kit — versions 6.0.0, 6.0.1, 6.5.0
- Tibco Spotfire_web_player — versions 6.0.0, 6.0.1, 6.5.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)