exploitDog

GHSA-35w2-fcvf-666f

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 3.7

Описание

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.

Ссылки

EPSS

Процентиль: 43%

0.00207

Низкий

3.7 Low

CVSS3

CVE ID

Дефекты

CWE-200

Связанные уязвимости

CVE-2015-4989

CVSS3: 3.7

nvd

около 10 лет назад

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.

EPSS

Процентиль: 43%

0.00207

Низкий

3.7 Low

CVSS3

CVE ID

Дефекты

CWE-200