CVE-2011-3133

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/45864Vendor Advisory
http://www.securitytracker.com/id?1025999
http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txtVendor Advisory
http://www.tibco.com/services/support/advisories/default.jspVendor Advisory
http://secunia.com/advisories/45864Vendor Advisory
http://www.securitytracker.com/id?1025999
http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txtVendor Advisory
http://www.tibco.com/services/support/advisories/default.jspVendor Advisory

Timeline

Published: Sep 2, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-31347.5Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and S CVE-2011-313510.0Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity CVE-2011-313610.0Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federate CVE-2011-313710.0Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federate CVE-2011-31385.0The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identit CVE-2011-31405.0IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly CVE-2011-31419.3Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers CVE-2011-314210.0Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute ar CVE-2011-314310.0Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and CVE-2011-31444.3Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before CVE-2011-31459.8When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the CVE-2011-31466.8librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service