PT-2018-4390 · Ibm · Ibm Tealeaf Customer Experience

Spyridon Chatzimichail · Publicado 2018-03-27 · Atualizado 2018-04-23 · CVE-2015-4987

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions 8.0 through 9.0.2

Description The issue allows remote attackers to bypass authentication via unspecified vectors in the search and replay servers.

Recommendations For versions 8.0 through 9.0.2, update to a version that contains a fix for this issue to prevent authentication bypass.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2015-4987

Produtos afetados

Ibm Tealeaf Customer Experience

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-4987 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/105896 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21981017 · Aviso do Fabricante