medium4.3
CVE-2011-3133
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analyt…
Impact
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Spotfire Analytics Server | through 10.0.1 Version 10.0.0 |
| Tibco | Spotfire Server | Versions 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.3.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/45864
- http://www.securitytracker.com/id?1025999
- http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
- http://www.tibco.com/services/support/advisories/default.jsp
- http://secunia.com/advisories/45864
- http://www.securitytracker.com/id?1025999
- http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
- http://www.tibco.com/services/support/advisories/default.jsp