CVE-2024-3331 - Vulnerability Details - OpenCVE

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/

History

Fri, 22 Nov 2024 12:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-863

MITRE

Status: PUBLISHED

Assigner: tibco

Published: 2024-06-27T18:50:13.758Z

Updated: 2024-10-29T19:56:28.829Z

Reserved: 2024-04-04T17:01:59.760Z

Link: CVE-2024-3331

Vulnrichment

Updated: 2024-08-01T20:05:08.452Z

NVD

Status : Awaiting Analysis

Published: 2024-06-27T19:15:15.153

Modified: 2024-11-21T09:29:24.200

Link: CVE-2024-3331

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-3331", "assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "state": "PUBLISHED", "assignerShortName": "tibco", "dateReserved": "2024-04-04T17:01:59.760Z", "datePublished": "2024-06-27T18:50:13.758Z", "dateUpdated": "2024-10-29T19:56:28.829Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Spotfire Enterprise Runtime for R - Server Edition", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "1.20.0", "status": "affected", "version": "1.12.7", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Statistics Services", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.3.1", "status": "affected", "version": "12.0.7", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Analyst", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.5.0", "status": "affected", "version": "12.0.9", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "Patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Desktop", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Server", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.5.0", "status": "affected", "version": "12.0.10", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "patch"}]}], "datePublic": "2024-06-26T06:30:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..<p>This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.</p>"}], "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0."}], "impacts": [{"descriptions": [{"lang": "en", "value": "The impact of this vulnerability depends on the privileges of the user running the affected software."}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "shortName": "tibco", "dateUpdated": "2024-06-27T18:50:13.758Z"}, "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><div><b><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher</span></p></li></ul><br><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span></p></li></ul></b></div></b>"}], "value": "* Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher\n\n\n\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher\n\n\n\n\n * Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher\n\n\n * Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher\n\n\n * Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher\n\n\n * Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher\n\n\n * Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher"}], "source": {"discovery": "UNKNOWN"}, "title": "Spotfire: NTLM token leakage", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-863", "lang": "en", "description": "CWE-863 Incorrect Authorization"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-01T19:50:43.928829Z", "id": "CVE-2024-3331", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-29T19:56:28.829Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:05:08.452Z"}, "title": "CVE Program Container", "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:05:08.452Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-3331", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-01T19:50:43.928829Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:44.587Z"}}], "cna": {"title": "Spotfire: NTLM token leakage", "source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "The impact of this vulnerability depends on the privileges of the user running the affected software."}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Spotfire", "product": "Spotfire Enterprise Runtime for R - Server Edition", "versions": [{"status": "affected", "version": "1.12.7", "versionType": "patch", "lessThanOrEqual": "1.20.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Statistics Services", "versions": [{"status": "affected", "version": "12.0.7", "versionType": "patch", "lessThanOrEqual": "12.3.1"}, {"status": "affected", "version": "14.0.0", "versionType": "patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Analyst", "versions": [{"status": "affected", "version": "12.0.9", "versionType": "patch", "lessThanOrEqual": "12.5.0"}, {"status": "affected", "version": "14.0.0", "versionType": "Patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Desktop", "versions": [{"status": "affected", "version": "14.0", "versionType": "patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Server", "versions": [{"status": "affected", "version": "12.0.10", "versionType": "patch", "lessThanOrEqual": "12.5.0"}, {"status": "affected", "version": "14.0.0", "versionType": "patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "* Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher\n\n\n\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher\n\n\n\n\n * Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher\n\n\n * Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher\n\n\n * Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher\n\n\n * Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher\n\n\n * Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher", "supportingMedia": [{"type": "text/html", "value": "<b><div><b><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher</span></p></li></ul><br><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span></p></li></ul></b></div></b>", "base64": false}]}], "datePublic": "2024-06-26T06:30:00.000Z", "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.", "supportingMedia": [{"type": "text/html", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..<p>This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.</p>", "base64": false}]}], "providerMetadata": {"orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "shortName": "tibco", "dateUpdated": "2024-06-27T18:50:13.758Z"}}}, "cveMetadata": {"cveId": "CVE-2024-3331", "state": "PUBLISHED", "dateUpdated": "2024-08-01T20:05:08.452Z", "dateReserved": "2024-04-04T17:01:59.760Z", "assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "datePublished": "2024-06-27T18:50:13.758Z", "assignerShortName": "tibco"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0."}, {"lang": "es", "value": "Vulnerabilidad en Spotfire Spotfire Enterprise Runtime para R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server permite El impacto de esta vulnerabilidad depende de los privilegios del usuario que ejecuta el software afectado. Este problema afecta Spotfire Enterprise Runtime para R - Server Edition: desde 1.12.7 hasta 1.20.0; Servicios de estad\u00edsticas de Spotfire: de 12.0.7 a 12.3.1, de 14.0.0 a 14.3.0; Spotfire Analyst: del 12.0.9 al 12.5.0, del 14.0.0 al 14.3.0; Spotfire Desktop: de 14.0 a 14.3.0; Servidor Spotfire: desde 12.0.10 hasta 12.5.0, desde 14.0.0 hasta 14.3.0."}], "id": "CVE-2024-3331", "lastModified": "2024-11-21T09:29:24.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.0, "source": "security@tibco.com", "type": "Secondary"}]}, "published": "2024-06-27T19:15:15.153", "references": [{"source": "security@tibco.com", "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}], "sourceIdentifier": "security@tibco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}