Lucene search
HistorySep 02, 2011 - 4:55 p.m.
CVE-2011-3133
tibco
spotfire
server
analytics
session fixation
vulnerability
hijack
web sessions
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.6%
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.
Affected configurations
Node
tibcospotfire_analytics_serverRange≤10.0.1
ORtibcospotfire_analytics_serverMatch10.0.0
ORtibcospotfire_serverMatch3.0.0
ORtibcospotfire_serverMatch3.0.1
ORtibcospotfire_serverMatch3.1.0
ORtibcospotfire_serverMatch3.1.1
ORtibcospotfire_serverMatch3.2.0
ORtibcospotfire_serverMatch3.3.0
Related
prion
prion
Session fixation
2011-09-02 16:55:00
cvelist
cvelist
CVE-2011-3133
2011-09-02 16:00:00
nvd
nvd
CVE-2011-3133
2011-09-02 16:55:06
nessus
nessus
TIBCO Spotfire Analytics Server Web Application Multiple Vulnerabilities
2014-10-13 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.6%
Related for CVE-2011-3133