Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-8988

TIBCO Spotfire Data Science Privilege Escalation Vulnerability

Description

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data modifications and deletions that should be denied. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Data Science for AWS

  • unspecified to ≤ 6.4.0affected

TIBCO Software Inc. TIBCO Spotfire Data Science

  • unspecified to ≤ 6.4.0affected

References