CVE-2014-5285
First published: Thu Sep 04 2014(Updated: )
Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO Spotfire | <=4.5.1 | |
| TIBCO Spotfire | =4.5.0 | |
| TIBCO Spotfire | =5.0.0 | |
| TIBCO Spotfire | =5.0.1 | |
| TIBCO Spotfire | =5.0.2 | |
| TIBCO Spotfire | =5.5.0 | |
| TIBCO Spotfire | =5.5.1 | |
| TIBCO Spotfire | =6.0.0 | |
| TIBCO Spotfire | =6.0.1 | |
| TIBCO Spotfire | =6.0.2 | |
| TIBCO Spotfire | =6.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-5285?
CVE-2014-5285 is classified as a critical vulnerability that allows remote attackers to gain privileges and access sensitive information.
How do I fix CVE-2014-5285?
To mitigate CVE-2014-5285, upgrade TIBCO Spotfire Server to version 4.5.2 or later, 5.0.3 or later, 5.5.2 or later, 6.0.3 or later, or 6.5.1 or later.
Which versions of TIBCO Spotfire Server are affected by CVE-2014-5285?
CVE-2014-5285 affects TIBCO Spotfire Server versions before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1.
What types of attacks can exploit CVE-2014-5285?
CVE-2014-5285 can be exploited by remote attackers to gain unauthorized privileges and potentially modify sensitive data.
Is there a patch available for CVE-2014-5285?
Yes, patches are available in the form of updates to TIBCO Spotfire Server that address CVE-2014-5285.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/tibco
- canonical/tibco spotfire
- version/tibco spotfire/4.5.1
- version/tibco spotfire/4.5.0
- version/tibco spotfire/5.0.0
- version/tibco spotfire/5.0.1
- version/tibco spotfire/5.0.2
- version/tibco spotfire/5.5.0
- version/tibco spotfire/5.5.1
- version/tibco spotfire/6.0.0
- version/tibco spotfire/6.0.1
- version/tibco spotfire/6.0.2
- version/tibco spotfire/6.5.0