CVE-2019-11210 CRITICAL

CVE-2019-11210: TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution

Vendor Tibco Software Inc.
Product TIBCO Enterprise Runtime for R - Server Edition
Published September 18, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operating system account hosting the affected component. This issue affects: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0.

Key dates

02Disclosure timeline

September 18, 2019 CVE published
September 16, 2024 Record updated