CVE-2024-3331

Name of the Vulnerable Software and Affected Versions Spotfire Enterprise Runtime for R - Server Edition versions 1.12.7 through 1.20.0 Spotfire Statistics Services versions 12.0.7 through 12.3.1 Spotfire Statistics Services versions 14.0.0 through 14.3.0 Spotfire Analyst versions 12.0.9 through 12.5.0 Spotfire Analyst versions 14.0.0 through 14.3.0 Spotfire Desktop versions 14.0 through 14.3.0 Spotfire Server versions 12.0.10 through 12.5.0 Spotfire Server versions 14.0.0 through 14.3.0

Description The issue affects the privileges of the user running the affected software, with the impact depending on these privileges.

Recommendations For Spotfire Enterprise Runtime for R - Server Edition versions 1.12.7 through 1.20.0, update to a version outside of this range. For Spotfire Statistics Services versions 12.0.7 through 12.3.1, update to a version outside of this range. For Spotfire Statistics Services versions 14.0.0 through 14.3.0, update to a version outside of this range. For Spotfire Analyst versions 12.0.9 through 12.5.0, update to a version outside of this range. For Spotfire Analyst versions 14.0.0 through 14.3.0, update to a version outside of this range. For Spotfire Desktop versions 14.0 through 14.3.0, update to a version outside of this range. For Spotfire Server versions 12.0.10 through 12.5.0, update to a version outside of this range. For Spotfire Server versions 14.0.0 through 14.3.0, update to a version outside of this range.