CVEvulnerability
CVE-2013-2373
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Affected configurations
• tibco spotfire web player 3.3
• tibco spotfire web player 3.3.2
• tibco spotfire web player 4.0
• tibco spotfire web player 4.0.1
• tibco spotfire web player 4.0.2
• tibco spotfire web player 4.5.0
• tibco spotfire web player 5.0.0
Related
Weakness · not in database (1)
References
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jsp Vendor Advisory
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jsp Vendor Advisory