CVE-2015-4990

Опубликовано: 02 янв. 2016

Источник: nvd

CVSS3: 4

CVSS2: 1.9

EPSS Низкий

Описание

The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified connection type.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21969739
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21969739
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*

Версия до 8.6 (включая)

cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00055

Низкий

4 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-c9m3-gjc2-vcx4