CVE-2019-11211

TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code Execution

Description

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an authenticated user to trigger remote code execution in certain circumstances. When the affected component runs with the containerized TERR service on Linux the host can theoretically be tricked into running malicious code. This issue affects: TIBCO Enterprise Runtime for R - Server Edition version 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace 10.4.0; 10.5.0.

Remediation

Solution:

TIBCO has released updated versions of the affected systems which address this issue: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below update to version 1.2.1 or higher TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0 update to version 10.5.1 or higher.

9.9

CVSS

Severity: Critical

CVSS 3.1 •

CVSS 3.0 •

CVSS 2.0 •

EPSS 3.13% Top 15%

Vendor Advisory tibco.com Vendor Advisory tibco.com

Affected: TIBCO Software Inc. TIBCO Enterprise Runtime for R - Server Edition

Affected: TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace

References

Link	Tags
http://www.tibco.com/services/support/advisories	vendor advisory
https://www.tibco.com/support/advisories/2019/09/tibco-security-advisory-september-17-2019-tibco-enterprise-runtime-for-r-server-2019-11211	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2019-11211?: CVE-2019-11211 has been scored as a critical severity vulnerability.
How to fix CVE-2019-11211?: To fix CVE-2019-11211: TIBCO has released updated versions of the affected systems which address this issue: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below update to version 1.2.1 or higher TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0 update to version 10.5.1 or higher.
Is CVE-2019-11211 being actively exploited in the wild?: It is possible that CVE-2019-11211 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~3% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-11211?: CVE-2019-11211 affects TIBCO Software Inc. TIBCO Enterprise Runtime for R - Server Edition, TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace.