CVE-2021-43051: TIBCO Spotfire Server API Authorization Vulnerability
The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of those granted to it. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Server: versions 10.10.6 and below, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, and 11.4.1, and TIBCO Spotfire Server: versions 11.5.0 and 11.6.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-43051?
CVE-2021-43051 is a vulnerability affecting the Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server.
How severe is CVE-2021-43051?
CVE-2021-43051 has a severity score of 6.8, which is classified as high.
Which versions of TIBCO Spotfire Server are affected by CVE-2021-43051?
CVE-2021-43051 affects TIBCO Spotfire Server versions 10.10.6 to 11.6.0.
What is the impact of CVE-2021-43051?
CVE-2021-43051 allows malicious custom API clients with network access to execute internal API operations outside of the expected scope.
How can I fix CVE-2021-43051?
To mitigate CVE-2021-43051, it is recommended to upgrade to a patched version of TIBCO Spotfire Server as soon as it becomes available.