PT-2017-7616 · Microsoft+1 · Iis+1

Published 2017-05-03 · Updated 2017-05-12 · CVE-2016-0382

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Consumer Experience versions 8.7 through 9.0

Description The IBM Tealeaf Consumer Experience portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS.

Recommendations For versions 8.7 through 9.0, consider restricting access to sensitive operational state information to minimize the risk of exposure.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0382

Affected Products

Ibm Tealeaf Consumer Experience

Iis

References · 4

• http://ibm.com/support/docview.wss?uid=swg22000590 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0382 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0382 · Vendor Advisory
• http://securityfocus.com/bid/98301 · Note