CVE-2017-1204

Опубликовано: 26 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22006392
Patch
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006455
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123740
Patch
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006392
Patch
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006455
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123740
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01167

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-87gx-294q-7xrf