Directory Traversal Vulnerability in IBM Tealeaf Customer Experience
CVE-2017-1279

6.5MEDIUM

Key Information:

Vendor: IBM
Status: Tealeaf Customer Experience
Vendor: CVE Published:; 26 January 2018

Summary

IBM Tealeaf Customer Experience versions 8.7, 8.8, and 9.0.2 are susceptible to a directory traversal vulnerability. This flaw allows remote attackers to manipulate URL requests using 'dot dot' sequences (/../), enabling them to traverse directories and access arbitrary files on the system. This poses significant risks as sensitive data may be exposed without proper authorization.

Affected Version(s)

Tealeaf Customer Experience 9.0.2

Tealeaf Customer Experience 8.7

Tealeaf Customer Experience 8.8

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/124757

x_refsource_MISC

http://www.ibm.com/support/docview.wss?uid=swg22006392

x_refsource_CONFIRM

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jan 26, 2018
Vulnerability Reserved
Nov 30, 2016