CVE-2014-7195: Infoleak
First published: Fri Nov 21 2014(Updated: )
Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for Spotfire Web Player before 1.6.1 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO Silver Fabric Enabler | <=1.6.0 | |
| TIBCO Spotfire Deployment Kit | =6.0.0 | |
| TIBCO Spotfire Deployment Kit | =6.0.1 | |
| TIBCO Spotfire Deployment Kit | =6.5.0 | |
| TIBCO Spotfire Deployment Kit | =6.5.1 | |
| TIBCO Spotfire Web Player | =6.0.0 | |
| TIBCO Spotfire Web Player | =6.0.1 | |
| TIBCO Spotfire Web Player | =6.5.0 | |
| TIBCO Spotfire Web Player | =6.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-7195?
CVE-2014-7195 is classified as a medium severity vulnerability due to its potential impact on sensitive information leakage.
How do I fix CVE-2014-7195?
To fix CVE-2014-7195, upgrade TIBCO Spotfire Web Player to version 6.0.2 or 6.5.2, or the Silver Fabric Enabler to version 1.6.1 or later.
Which versions are affected by CVE-2014-7195?
CVE-2014-7195 affects TIBCO Spotfire Web Player versions 6.0.0-6.0.1 and 6.5.0-6.5.1, as well as TIBCO Spotfire Deployment Kit versions 6.0.0-6.0.1 and 6.5.0-6.5.1.
Who is at risk from CVE-2014-7195?
Remote authenticated users of affected TIBCO Spotfire Web Player installations are at risk from CVE-2014-7195.
What type of vulnerability is CVE-2014-7195?
CVE-2014-7195 is an information disclosure vulnerability allowing unauthorized access to sensitive information.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/tibco
- canonical/tibco silver fabric enabler
- version/tibco silver fabric enabler/1.6.0
- canonical/tibco spotfire deployment kit
- version/tibco spotfire deployment kit/6.0.0
- version/tibco spotfire deployment kit/6.0.1
- version/tibco spotfire deployment kit/6.5.0
- version/tibco spotfire deployment kit/6.5.1
- canonical/tibco spotfire web player
- version/tibco spotfire web player/6.0.0
- version/tibco spotfire web player/6.0.1
- version/tibco spotfire web player/6.5.0
- version/tibco spotfire web player/6.5.1