Medium severity · published May 3, 2017
CVE-2016-0382
The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network…
4.0
CVSS
0.3%
EPSS
No
On KEV
Description
The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. IBM X-Force ID: 112356.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tealeaf Customer Experience · IBM Corporation
8.7, 8.8, 9.0.0, 9.0.1, 9.0.2 · source: vendor
TC
Tealeaf Consumer Experience · Ibm
8.7; 8.7.0; 8.7.1; 8.8; 8.8.0; 8.8.1; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-0382
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-0382
Patch
http://www.ibm.com/support/docview.wss?uid=swg22000590
Third Party Advisory
http://www.securityfocus.com/bid/98301
More from Tealeaf Customer Experience
5.9
CVE-2016-5900
IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the TLS…