PT-2018-4907 · Ibm · Ibm Tealeaf Customer Experience

Publicado 2018-01-26 · Atualizado 2018-02-07 · CVE-2016-2983

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions 8.7 through 9.0.2

Description The issue allows a remote attacker to read operational data or TLS session state for any active sessions, cause denial of service, or bypass security under unusual circumstances.

Recommendations For versions 8.7 through 9.0.2, update to a version that addresses this issue to prevent a remote attacker from reading operational data, causing denial of service, or bypassing security.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-2983

Produtos afetados

Ibm Tealeaf Customer Experience

Referências · 6

• http://ibm.com/support/docview.wss?uid=swg22006455 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2983 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/113999 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-2983 · Aviso do Fabricante
• http://securityfocus.com/bid/102891 · Nota
• http://ibm.com/support/docview.wss?uid=swg22006393 · Aviso do Fabricante