Multiple TIBCO Products CVE-2019-11206 Multiple Security Bypass Vulnerabilities

Bugtraq ID:	108405
Class:	Unknown
CVE:	CVE-2019-11206
Remote:	Yes
Local:	No
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	TIBCO Spotfire Server 10.2 TIBCO Spotfire Server 10.1 TIBCO Spotfire Server 10.0.1 TIBCO Spotfire Server 10.0 TIBCO Spotfire Server 7.14 TIBCO Spotfire Server 7.13 TIBCO Spotfire Server 7.12 TIBCO Spotfire Server 7.11.2 TIBCO Spotfire Server 7.11.1 TIBCO Spotfire Server 7.11 TIBCO Spotfire Server 7.10.2 TIBCO Spotfire Server 7.10.1 TIBCO Spotfire Server 7.10 TIBCO Spotfire Server 7.8.1 TIBCO Spotfire Server 7.8 TIBCO Spotfire Server 7.7.1 TIBCO Spotfire Server 7.7 TIBCO Spotfire Server 7.6.1 TIBCO Spotfire Server 7.6 TIBCO Spotfire Server 7.5.1 TIBCO Spotfire Server 7.5 TIBCO Spotfire Server 7.0.2 TIBCO Spotfire Server 7.0.1 TIBCO Spotfire Server 7.0 TIBCO Spotfire Server 6.5.4 TIBCO Spotfire Server 6.5.3 TIBCO Spotfire Server 6.5.2 TIBCO Spotfire Server 6.0.5 TIBCO Spotfire Server 6.0.4 TIBCO Spotfire Server 6.0.2 TIBCO Spotfire Server 6.0.1 TIBCO Spotfire Server 6.0 TIBCO Spotfire Server 5.5.4 TIBCO Spotfire Server 5.5.3 TIBCO Spotfire Server 5.5.1 TIBCO Spotfire Server 5.5 TIBCO Spotfire Server 5.0.2 TIBCO Spotfire Server 5.0.1 TIBCO Spotfire Server 5.0 TIBCO Spotfire Server 4.5.1 TIBCO Spotfire Server 4.5 TIBCO Spotfire Server 3.3.4 TIBCO Spotfire Server 3.3.3 TIBCO Spotfire Server 3.2.2 TIBCO Spotfire Server 3.1.3 TIBCO Spotfire Server 6.5.1 TIBCO Spotfire Server 6.5.0 TIBCO Spotfire Server 6.0.3 TIBCO Spotfire Server 5.5.2 TIBCO Spotfire Server 5.0.3 TIBCO Spotfire Server 4.5.2 TIBCO Spotfire Server 3.3.0 TIBCO Spotfire Server 3.2.0 TIBCO Spotfire Server 3.1.1 TIBCO Spotfire Server 3.1.0 TIBCO Spotfire Server 3.0.1 TIBCO Spotfire Server 3.0.0 TIBCO Spotfire Analytics Platform for AWS Marketplace 10.2 TIBCO Spotfire Analytics Platform for AWS Marketplace 10.1 TIBCO Spotfire Analytics Platform for AWS Marketplace 10.0.1 TIBCO Spotfire Analytics Platform for AWS Marketplace 10.0 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.14.1 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.14 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.8.1 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.8 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.0.2 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.0.1 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.0
Not Vulnerable:	TIBCO Spotfire Server 10.2.1 TIBCO Spotfire Server 7.11.3 TIBCO Spotfire Analytics Platform for AWS Marketplace 10.3

Multiple TIBCO Products CVE-2019-11206 Multiple Security Bypass Vulnerabilities

Multiple TIBCO products are prone to multiple security-bypass vulnerabilities.

Successful exploits may allow an attacker to bypass certain security restrictions and to perform unauthorized actions; this may aid in launching further attacks.

The following TIBCO products are affected:

TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.2.0 and prior
TIBCO Spotfire Server versions 7.11.2 and prior
TIBCO Spotfire Server versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, and 10.2.0

Multiple TIBCO Products CVE-2019-11206 Multiple Security Bypass Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple TIBCO Products CVE-2019-11206 Multiple Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.