Multiple TIBCO Products CVE-2014-7195 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	71260
Class:	Design Error
CVE:	CVE-2014-7195
Remote:	Yes
Local:	No
Published:	Nov 24 2014 12:00AM
Updated:	Nov 24 2014 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:
Not Vulnerable:

Multiple TIBCO Products CVE-2014-7195 Multiple Information Disclosure Vulnerabilities

Multiple TIBCO Products are prone to multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to obtain potentially sensitive information that may lead to further attacks.

The following products are affected:

TIBCO Spotfire Web Player 6.0.0 and 6.0.1
TIBCO Spotfire Web Player 6.5.0 and 6.5.1
TIBCO Spotfire Deployment Kit 6.0.0 and 6.0.1
TIBCO Spotfire Deployment Kit 6.5.0 and 6.5.1
TIBCO Silver Fabric Enabler for Spotfire Web Player 1.6.0

Multiple TIBCO Products CVE-2014-7195 Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues using browser or readily available tools.

Multiple TIBCO Products CVE-2014-7195 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple TIBCO Products CVE-2014-7195 Multiple Information Disclosure Vulnerabilities

References:

• TIBCO Homepage (TIBCO)
  
• TIBCO Spotfire Web Player vulnerabilities (TIBCO)