A vulnerability has been reported in TIBCO Spotfire products, which can be exploited by malicious people to disclose sensitive information.

The vulnerability is caused due to an unspecified error and can be exploited to disclose sensitive information by tricking a user into visiting a malicious website.

The vulnerability affects the following components:
TIBCO Spotfire Web Application.
TIBCO Spotfire Web Player Application.
TIBCO Spotfire Automation Services Application.
TIBCO Spotfire Analytics Client Application.

The vulnerability is reported in the following products:
TIBCO Spotfire Analytics Server versions prior to 10.1.2.
TIBCO Spotfire Server versions 3.1.x prior to 3.1.3, 3.2.x prior to 3.2.2, and 3.3.x prior to 3.3.3.
TIBCO Spotfire Web Player versions 3.1.x prior to 3.1.1, 3.2.x prior to 3.2.2, 3.3.x prior to 3.3.2, and 4.0.x prior to 4.0.2.
TIBCO Spotfire Automation Services 3.1.x prior to 3.1.1, 3.2.x prior to 3.2.2, 3.3.x prior to 3.3.2, and 4.0.x prior to 4.0.2.
TIBCO Spotfire Professional versions 3.1.x prior to 3.1.1, 3.2.x prior to 3.2.2, 3.3.x prior to 3.3.2, and 4.0.x prior to 4.0.2.

Solution
TIBCO Spotfire Analytics Server:
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp

Deep Links
Links available to Secunia VIM customers