Unscored severity · published Sep 2, 2011
CVE-2011-3133
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Spotfire Analytics Server · Tibco
through 10.0.1; 10.0.0 · source: NVD
SS
Spotfire Server · Tibco
3.0.0; 3.0.1; 3.1.0; 3.1.1; 3.2.0; 3.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3133
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3133
Vendor Advisory
http://secunia.com/advisories/45864
www.securitytracker.com
http://www.securitytracker.com/id?1025999
Vendor Advisory
http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/default.jsp
More from Spotfire Analytics Server
–
CVE-2012-0690
TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before…
–
CVE-2011-3134
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1,…
–
CVE-2011-3132
Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server…