CVE:CVE-2019-11210
CNNVD:CNNVD-201909-876
TIBCO Software Spotfire Analytics Platform for AWS Marketplace和TIBCO Software Enterprise Runtime for R-Server Edition都是美国TIBCO Software公司的产品。TIBCO Software Spotfire Analytics Platform for AWS Marketplace是一套为云应用商店AWS提供数据可视化分析的平台。TIBCO Software Enterprise Runtime for R-Server Edition是一款适用于R-Server的企业级统计分析引擎。
TIBCO Software TIBCO Enterprise Runtime for R - Server Edition 1.2.0及之前版本、TIBCO Spotfire Analytics Platform for AWS Marketplace 10.4.0版本和10.5.0版本中的服务器组件存在安全漏洞。攻击者可利用该漏洞绕过访问控制并执行代码。
solution:Upgrade tibco enterprise_runtime_for_r to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade tibco spotfire_analytics_platform_for_aws to a higher version than 10.4.0,10.5.0,and avoid the version 10.4.0,10.5.0