CVE-2019-17336 Explained : Impact and Mitigation

TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server are affected by vulnerabilities that could lead to unauthorized access to information and credentials.

Understanding CVE-2019-17336

This CVE involves vulnerabilities in TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server that could potentially expose credentials for shared data sources.

What is CVE-2019-17336?

The Data access layer component of TIBCO Spotfire Analytics Platform and Spotfire Server has vulnerabilities that may allow unauthorized access to information, potentially leading to the acquisition of credentials used to access Spotfire data sources.

The Impact of CVE-2019-17336

Theoretical possibility of an attacker recovering credentials for accessing Spotfire data sources.

Technical Details of CVE-2019-17336

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerabilities in TIBCO Spotfire Analytics Platform and Spotfire Server could enable unauthorized access to information and credentials.

Affected Systems and Versions

TIBCO Spotfire Analytics Platform for AWS Marketplace version 10.6.0
TIBCO Spotfire Server versions 7.11.7 and earlier, as well as versions 7.12.0 to 10.6.0

Exploitation Mechanism

The attacker would need privileges to save a Spotfire file to the library and exploit the vulnerabilities when NTLM credentials or a credentials profile is in use.

Mitigation and Prevention

Protecting systems from this vulnerability is crucial to maintaining security.

Immediate Steps to Take

Update TIBCO Spotfire Analytics Platform to version 10.6.1 or higher
Update TIBCO Spotfire Server versions 7.11.7 and below to version 7.11.8 or higher
Update TIBCO Spotfire Server versions 7.12.0 to 10.6.0 to version 10.3.5 or higher

Long-Term Security Practices

Regularly monitor and update software components
Implement strong access control measures
Conduct security audits and assessments

Patching and Updates

TIBCO has released updated versions to address the vulnerabilities