Remote Information Disclosure in IBM Tealeaf Customer Experience Product
CVE-2016-5900
5.9MEDIUM
Summary
The IBM Tealeaf Customer Experience on Cloud Network Capture Add-On is susceptible to an information disclosure vulnerability due to improper validation of TLS certificates. This flaw allows remote attackers to perform man-in-the-middle attacks, intercepting sensitive data traversing unsecured channels. By exploiting this vulnerability, attackers can gain unauthorized access to confidential user information, significantly compromising data security.
Affected Version(s)
Tealeaf Customer Experience 16.1.01
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved