PT-2020-20645
CVE-2020-9416
·
تاريخ النشر
2020-09-15
·
تاريخ التحديث
2020-09-24
الوصف من
CVSS 3.1
8.2
عاليةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
TIBCO Spotfire Analyst versions 10.7.0 through 10.10.0
TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.7.0 through 10.10.1
TIBCO Spotfire Desktop versions 10.7.0 through 10.10.0
TIBCO Spotfire Server versions 10.7.0 through 10.10.1
Description
The vulnerability in the Spotfire client component allows a legitimate user to inject scripts, which will be executed at the privileges of the victim if the victim is authenticated to the affected system.
Recommendations
For TIBCO Spotfire Analyst versions 10.7.0 through 10.10.0, update to a version that contains a fix for this issue.
For TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.7.0 through 10.10.1, update to a version that contains a fix for this issue.
For TIBCO Spotfire Desktop versions 10.7.0 through 10.10.0, update to a version that contains a fix for this issue.
For TIBCO Spotfire Server versions 10.7.0 through 10.10.1, update to a version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾