Improper access control

2013-03-1522:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.2%

JSON

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.

CPENameOperatorVersion
spotfire_web_playereq3.3.2
spotfire_web_playereq3.3
spotfire_web_playereq4.0.2
spotfire_web_playereq4.0
spotfire_web_playereq4.0.1
spotfire_web_playereq4.5.0
spotfire_web_playereq5.0.0

Name	Operator	Version
spotfire_web_player	eq	3.3.2
spotfire_web_player	eq	3.3
spotfire_web_player	eq	4.0.2
spotfire_web_player	eq	4.0
spotfire_web_player	eq	4.0.1
spotfire_web_player	eq	4.5.0
spotfire_web_player	eq	5.0.0