PT-2017-7616 · Microsoft+1 · Iis+1

Publicado 2017-05-03 · Atualizado 2017-05-12 · CVE-2016-0382

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Consumer Experience versions 8.7 through 9.0

Description The IBM Tealeaf Consumer Experience portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS.

Recommendations For versions 8.7 through 9.0, consider restricting access to sensitive operational state information to minimize the risk of exposure.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-0382

Produtos afetados

Ibm Tealeaf Consumer Experience

Iis

Referências · 4

• http://securityfocus.com/bid/98301 · Nota
• http://ibm.com/support/docview.wss?uid=swg22000590 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0382 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0382 · Aviso do Fabricante