CVEvulnerability

CVE-2011-3133

4.3 MEDIUM Published 2011-09-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-09-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

• tibco spotfire analytics server (<= 10.0.1) • tibco spotfire analytics server 10.0.0 • tibco spotfire server 3.0.0 • tibco spotfire server 3.0.1 • tibco spotfire server 3.1.0 • tibco spotfire server 3.1.1 • tibco spotfire server 3.2.0 • tibco spotfire server 3.3.0

References