Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2019-11210

TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operating system account hosting the affected component. This issue affects: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Enterprise Runtime for R - Server Edition

  • 1.2.0 and belowaffected

TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace

  • 10.4.0affected
  • 10.5.0affected

References