CVE-2024-3331 Spotfire: NTLM token leakage
Attackers can leak NTLM tokens from Spotfire components, potentially enabling unauthorized access or privilege escalation depending on user privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-3331?
CVE-2024-3331 is a medium-severity vulnerability in Spotfire Analyst, published on 27 Jun 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.
Weakness: CWE-863
Which versions are affected by CVE-2024-3331?
How do I fix CVE-2024-3331?
No fix has been published for CVE-2024-3331 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-3331 being exploited?
There is no known exploitation of CVE-2024-3331 in the wild and no public exploit code.
Sources
Also known as GHSA-frr7-vm5q-h4f9.