CVE-2017-5527 TIBCO Spotfire injection vulnerabilities

What is CVE-2017-5527?

CVE-2017-5527 is a medium-severity SQL injection vulnerability in TIBCO Spotfire Analytics Platform for AWS Marketplace, published on 9 May 2017. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.

Weakness: CWE-89

Which versions are affected by CVE-2017-5527?

It affects 2 products.

Products include Tibco Spotfire Analytics Platform for Aws, Tibco Spotfire Server.

How do I fix CVE-2017-5527?

No fix has been published for CVE-2017-5527 yet. Limit exposure of the affected software until one is available.

Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.

Is CVE-2017-5527 being exploited?

There is no known exploitation of CVE-2017-5527 in the wild and no public exploit code.

Other vulnerabilities in TIBCO Spotfire Analytics Platform for AWS Marketplace

• CVE-2020-9408 TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability Critical 9.9
• CVE-2019-11205 TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities High 8.8
• CVE-2018-18813 TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities High 8.8
• CVE-2018-18814 TIBCO Spotfire Authentication Vulnerability High 8.8
• CVE-2019-17337 TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cfr5-rfj7-vjc4.