CVE-2011-3133

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.

Published: Sep 2, 2011
Updated: Apr 13, 2023
CVE: CVE-2011-3133
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
tibco / spotfire_server	3.0.0	3.0.0.x
tibco / spotfire_server	3.3.0	3.3.0.x
tibco / spotfire_server	3.1.1	3.1.1.x
tibco / spotfire_server	3.1.0	3.1.0.x
tibco / spotfire_analytics_server	-	10.0.1.x
tibco / spotfire_server	3.2.0	3.2.0.x
tibco / spotfire_analytics_server	10.0.0	10.0.0.x
tibco / spotfire_server	3.0.1	3.0.1.x

http://secunia.com/advisories/45864
http://www.securitytracker.com/id?1025999
http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
http://www.tibco.com/services/support/advisories/default.jsp

Vulnerability Database

289,784

CVE-2011-3133