Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-3331

Spotfire: NTLM token leakage

Description

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spotfire Spotfire Enterprise Runtime for R - Server Edition

Default version status: unaffected

  • 1.12.7 to ≤ 1.20.0affected

Spotfire Spotfire Statistics Services

Default version status: unaffected

  • 12.0.7 to ≤ 12.3.1affected
  • 14.0.0 to ≤ 14.3.0affected

Spotfire Spotfire Analyst

Default version status: unaffected

  • 12.0.9 to ≤ 12.5.0affected
  • 14.0.0 to ≤ 14.3.0affected

Spotfire Spotfire Desktop

Default version status: unaffected

  • 14.0 to ≤ 14.3.0affected

Spotfire Spotfire Server

Default version status: unaffected

  • 12.0.10 to ≤ 12.5.0affected
  • 14.0.0 to ≤ 14.3.0affected

References