CVE-2015-4988

Опубликовано: 18 янв. 2016

Источник: nvd

CVSS3: 8.6

CVSS2: 7.8

EPSS Низкий

Описание

Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21968868
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21968868
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*

Версия до 8.6 (включая)

cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00494

Низкий

8.6 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-979j-7fmf-jxq3