发布日期：2023-04-26

更新日期：2023-07-04

受影响系统：

Tibco Software TIBCO Software Spotfire Statistics Services < ="11.4.10

Tibco Software TIBCO Software Spotfire Statistics Services 12.2.0

Tibco Software TIBCO Software Spotfire Statistics Services 12.1.0

Tibco Software TIBCO Software Spotfire Statistics Services 12.0.2

Tibco Software TIBCO Software Spotfire Statistics Services 12.0.1

Tibco Software TIBCO Software Spotfire Statistics Services 12.0.0

Tibco Software TIBCO Software Spotfire Statistics Services 11.8.1

Tibco Software TIBCO Software Spotfire Statistics Services 11.8.0

Tibco Software TIBCO Software Spotfire Statistics Services 11.7.0

Tibco Software TIBCO Software Spotfire Statistics Services 11.6.2

Tibco Software TIBCO Software Spotfire Statistics Services 11.6.1

Tibco Software TIBCO Software Spotfire Statistics Services 11.6.0

Tibco Software TIBCO Software Spotfire Statistics Services 11.5.0

描述：

CVE(CAN) ID: CVE-2023-29268

TIBCO Software Spotfire Statistics Services是美国TIBCO Software公司的一款基于TERR引擎（或其它引擎）的综合统计和数据算法库。

TIBCO Software Spotfire Statistics Services 11.4.10及之前版本、11.5.0、11.6.0、11.6.1、11.6.2、11.7.0、11.8.0、11.8.1、12.0.0、12.0.1、12.0.2、12.1.0和12.2.0版本的Splus Server组件存在任意文件上传漏洞，未经身份认证的远程攻击者可利用该漏洞上传或修改Web服务器目录中的任意文件。

< **>

建议：

厂商补丁：

Tibco Software

--------------

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

https://www.tibco.com/services/support/advisories

浏览次数：13

严重程度：0（网友投票）