CVE-2015-5712: Infoleak
Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote authenticated users to obtain sensitive system information by visiting an unspecified URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5712?
CVE-2015-5712 has been categorized with a medium severity level due to its potential for sensitive information exposure.
How do I fix CVE-2015-5712?
To resolve CVE-2015-5712, update TIBCO Spotfire Server to version 5.5.4 or later, 6.0.5 or later, 6.5.4 or later, or 7.0.1 or later.
Which versions of TIBCO Spotfire are affected by CVE-2015-5712?
Affected versions include TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1.
Can unauthenticated users exploit CVE-2015-5712?
No, CVE-2015-5712 requires remote authenticated users to exploit the vulnerability.
What kind of information could be exposed due to CVE-2015-5712?
CVE-2015-5712 can allow authenticated remote users to obtain sensitive system information from affected instances of TIBCO Spotfire.