PT-2016-6737 · Ibm · Ibm Tealeaf Customer Experience

Publicado

2016-11-25

·

Atualizado

2016-11-28

·

CVE-2016-5968

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions 8.x through 8.7.1.8847 FP9 IBM Tealeaf Customer Experience versions 8.8.x through 8.8.0.9048 IBM Tealeaf Customer Experience version 9.0.0 IBM Tealeaf Customer Experience versions 9.0.1 through 9.0.1.1116 IBM Tealeaf Customer Experience versions 9.0.1A through 9.0.1.5107 IBM Tealeaf Customer Experience versions 9.0.2 through 9.0.2.1222 IBM Tealeaf Customer Experience versions 9.0.2A through 9.0.2.5223
Description The issue allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks. SSRF is a type of attack where an attacker can trick a server into making requests to internal or external resources, potentially leading to unauthorized access or information disclosure.
Recommendations For IBM Tealeaf Customer Experience versions 8.x through 8.7.1.8847 FP9, update to version 8.7.1.8847 FP10. For IBM Tealeaf Customer Experience versions 8.8.x through 8.8.0.9048, update to version 8.8.0.9049 FP9. For IBM Tealeaf Customer Experience version 9.0.0, update to version 9.0.1.1117 FP5 or later. For IBM Tealeaf Customer Experience versions 9.0.1 through 9.0.1.1116, update to version 9.0.1.1117 FP5. For IBM Tealeaf Customer Experience versions 9.0.1A through 9.0.1.5107, update to version 9.0.1.5108 FP5. For IBM Tealeaf Customer Experience versions 9.0.2 through 9.0.2.1222, update to version 9.0.2.1223 FP3. For IBM Tealeaf Customer Experience versions 9.0.2A through 9.0.2.5223, update to version 9.0.2.5224 FP3.

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2016-5968

Produtos afetados

Ibm Tealeaf Customer Experience