Remote Information Disclosure in IBM Tealeaf Customer Experience Product
CVE-2016-5900

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Tealeaf Customer Experience
Vendor
CVE Published:
8 February 2017

Summary

The IBM Tealeaf Customer Experience on Cloud Network Capture Add-On is susceptible to an information disclosure vulnerability due to improper validation of TLS certificates. This flaw allows remote attackers to perform man-in-the-middle attacks, intercepting sensitive data traversing unsecured channels. By exploiting this vulnerability, attackers can gain unauthorized access to confidential user information, significantly compromising data security.

Affected Version(s)

Tealeaf Customer Experience 16.1.01

References

http://www.ibm.com/support/docview.wss?uid=swg21994534
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.