Vulnerability · Published Dec 14, 2021 · Assigned by tibco
CVE-2021-43051TIBCO Spotfire Server API Authorization Vulnerability
High 7.1
In plain English
A high-severity security flaw in TIBCO Spotfire Server from TIBCO Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).
Official description
The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of those granted to it. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Server: versions 10.10.6 and below, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, and 11.4.1, and TIBCO Spotfire Server: versions 11.5.0 and 11.6.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TIBCO Software Inc. | TIBCO Spotfire Server | unspecified – through 10.10.6 |
| TIBCO Software Inc. | TIBCO Spotfire Server | 11.0.011.1.011.2.011.3.011.4.011.4.1 |
| TIBCO Software Inc. | TIBCO Spotfire Server | 11.5.011.6.0 |