CVE-2018-5435 : What You Need to Know

TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs, including versions up to and including 7.8.0, 7.9.0, 7.9.1, 7.10.0, 7.10.1, 7.11.0, and 7.12.0, are found to have multiple vulnerabilities. These vulnerabilities have the potential to enable remote code execution in the TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components.

Understanding CVE-2018-5435

This CVE identifies a remote code execution vulnerability in various products within the TIBCO Spotfire product family.

What is CVE-2018-5435?

The CVE-2018-5435 vulnerability allows unprivileged remote attackers to execute code with the privileges of the user account running the affected components.

The Impact of CVE-2018-5435

The vulnerability has a CVSS v3.0 base score of 9.6, indicating a critical severity level. The impact includes the theoretical possibility of remote code execution with high confidentiality and integrity impacts.

Technical Details of CVE-2018-5435

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components contain multiple vulnerabilities that may allow for remote code execution.

Affected Systems and Versions

TIBCO Spotfire Analyst: versions up to and including 7.8.0, 7.9.0, 7.9.1, 7.10.0, 7.10.1, 7.11.0, 7.12.0
TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0
TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0, 7.9.0, 7.9.1, 7.10.0, 7.10.1, 7.11.0, 7.12.0
TIBCO Spotfire Desktop: versions up to and including 7.8.0, 7.9.0, 7.9.1, 7.10.0, 7.10.1, 7.11.0, 7.12.0
TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0, 7.9.0, 7.9.1, 7.10.0, 7.10.1, 7.11.0

Exploitation Mechanism

The vulnerability can be exploited remotely with low attack complexity and user interaction required.

Mitigation and Prevention

To address CVE-2018-5435, follow these mitigation steps:

Immediate Steps to Take

Update affected components to the following versions:
TIBCO Spotfire Analyst: 7.8.1 or higher for versions 7.8.0 and below, 7.9.2 or higher for versions 7.9.0 and 7.9.1, 7.10.2 or higher for versions 7.10.0 and 7.10.1, 7.11.1 for version 7.11.0, 7.13.0 for version 7.12.0
TIBCO Spotfire Analytics Platform for AWS Marketplace: 7.13.0 or higher for versions 7.12.0 and below
TIBCO Spotfire Deployment Kit: 7.8.1 or higher for versions 7.8.0 and below, 7.9.2 or higher for versions 7.9.0 and 7.9.1, 7.10.2 or higher for versions 7.10.0 and 7.10.1, 7.11.1 or higher for version 7.11.0, 7.13.0 or higher for version 7.12.0
TIBCO Spotfire Desktop: 7.8.1 or higher for versions 7.8.0 and below, 7.9.2 or higher for versions 7.9.0 and 7.9.1, 7.10.2 or higher for versions 7.10.0 and 7.10.1, 7.11.1 or higher for version 7.11.0, 7.13.0 or higher for version 7.12.0
TIBCO Spotfire Desktop Language Packs: 7.8.1 or higher for versions 7.8.0 and below, 7.9.2 or higher for versions 7.9.0 and 7.9.1, 7.10.2 or higher for versions 7.10.0 and 7.10.1, 7.11.1 or higher for version 7.11.0

Long-Term Security Practices

Regularly update software to the latest versions to patch known vulnerabilities
Implement network security measures to prevent unauthorized access
Conduct regular security audits and assessments

Patching and Updates

Apply vendor-provided patches promptly to ensure system security