CVE-2022-30579: TIBCO Spotfire Server Blind SSRF vulnerability
First published: Tue Sep 20 2022(Updated: )
The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0.
Credit: security@tibco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tibco Spotfire Analytics Platform | =12.0.0 | |
| TIBCO Spotfire Server | =12.0.0 |
Remedy
TIBCO has released updated versions of the affected components which address these issues. TIBCO Spotfire Analytics Platform for AWS Marketplace version 12.0.0: update to version 12.0.1 or later TIBCO Spotfire Server version 12.0.0: update to version 12.0.1 or later
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this TIBCO Spotfire Analytics Platform and Spotfire Server vulnerability?
The vulnerability ID for this TIBCO Spotfire Analytics Platform and Spotfire Server vulnerability is CVE-2022-30579.
What is the severity rating of CVE-2022-30579?
CVE-2022-30579 has a severity rating of 8.4, which is considered high.
What is the affected software for CVE-2022-30579?
The affected software for CVE-2022-30579 is TIBCO Spotfire Analytics Platform version 12.0.0 for AWS Marketplace and TIBCO Spotfire Server version 12.0.0.
What is the vulnerability description for CVE-2022-30579?
CVE-2022-30579 is a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected TIBCO Spotfire Analytics Platform and Spotfire Server.
Where can I find more information about CVE-2022-30579?
You can find more information about CVE-2022-30579 in the TIBCO Security Advisories at https://www.tibco.com/services/support/advisories and specifically at https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-20-2022-tibco-spotfire-cve-2022-30579.
- agent/references
- agent/type
- agent/softwarecombine
- agent/author
- agent/weakness
- agent/severity
- agent/remedy
- agent/title
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/tibco
- canonical/tibco spotfire analytics platform
- version/tibco spotfire analytics platform/12.0.0
- canonical/tibco spotfire server
- version/tibco spotfire server/12.0.0