PT-2018-4907 · Ibm · Ibm Tealeaf Customer Experience

Published 2018-01-26 · Updated 2018-02-07 · CVE-2016-2983

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions 8.7 through 9.0.2

Description The issue allows a remote attacker to read operational data or TLS session state for any active sessions, cause denial of service, or bypass security under unusual circumstances.

Recommendations For versions 8.7 through 9.0.2, update to a version that addresses this issue to prevent a remote attacker from reading operational data, causing denial of service, or bypassing security.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-2983

Affected Products

Ibm Tealeaf Customer Experience

References · 6

• http://ibm.com/support/docview.wss?uid=swg22006455 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2983 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/113999 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2983 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22006393 · Vendor Advisory
• http://securityfocus.com/bid/102891 · Note