Lucene search
MitreCVE-2014-5285HistorySep 04, 2014 - 10:55 a.m.
CVE-2014-5285
2014-09-0410:55:07
mitre
web.nvd.nist.gov
25
cve-2014-5285
tibco spotfire server
authentication module
remote attackers
gain privileges
sensitive information
modify data
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.005
Percentile
75.4%
Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.
Affected configurations
Node
tibcospotfire_serverRange≤4.5.1
ORtibcospotfire_serverMatch4.5.0
ORtibcospotfire_serverMatch5.0.0
ORtibcospotfire_serverMatch5.0.1
ORtibcospotfire_serverMatch5.0.2
ORtibcospotfire_serverMatch5.5.0
ORtibcospotfire_serverMatch5.5.1
ORtibcospotfire_serverMatch6.0.0
ORtibcospotfire_serverMatch6.0.1
ORtibcospotfire_serverMatch6.0.2
ORtibcospotfire_serverMatch6.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tibco | spotfire_server | * | cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:* |
| tibco | spotfire_server | 4.5.0 | cpe:2.3:a:tibco:spotfire_server:4.5.0:*:*:*:*:*:*:* |
| tibco | spotfire_server | 5.0.0 | cpe:2.3:a:tibco:spotfire_server:5.0.0:*:*:*:*:*:*:* |
| tibco | spotfire_server | 5.0.1 | cpe:2.3:a:tibco:spotfire_server:5.0.1:*:*:*:*:*:*:* |
| tibco | spotfire_server | 5.0.2 | cpe:2.3:a:tibco:spotfire_server:5.0.2:*:*:*:*:*:*:* |
| tibco | spotfire_server | 5.5.0 | cpe:2.3:a:tibco:spotfire_server:5.5.0:*:*:*:*:*:*:* |
| tibco | spotfire_server | 5.5.1 | cpe:2.3:a:tibco:spotfire_server:5.5.1:*:*:*:*:*:*:* |
| tibco | spotfire_server | 6.0.0 | cpe:2.3:a:tibco:spotfire_server:6.0.0:*:*:*:*:*:*:* |
| tibco | spotfire_server | 6.0.1 | cpe:2.3:a:tibco:spotfire_server:6.0.1:*:*:*:*:*:*:* |
| tibco | spotfire_server | 6.0.2 | cpe:2.3:a:tibco:spotfire_server:6.0.2:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2014-09-04 10:55:00
cvelist
cvelist
CVE-2014-5285
2014-09-04 10:00:00
nvd
nvd
CVE-2014-5285
2014-09-04 10:55:07
nessus
nessus
TIBCO Spotfire Server Authentication Module Unspecified Privilege Escalation
2014-10-13 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.005
Percentile
75.4%
Related for CVE-2014-5285