Lucene search

[email protected]CVE-2015-4989

HistoryJan 02, 2016 - 5:59 a.m.

CVE-2015-4989

2016-01-0205:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cve

ibm tealeaf customer experience

security vulnerability

remote attack

chart manipulation

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.8%

JSON

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.

CPENameOperatorVersion
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq9.0.1a
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq9.0.2
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq9.0.0
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq9.0.0a
ibm:tealeaf_customer_experienceibm tealeaf customer experiencele8.6
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq8.7
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq9.0.1
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq9.0.2a
ibm:tealeaf_customer_experienceibm tealeaf customer experienceeq8.8

CPE	Name	Operator	Version
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	9.0.1a
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	9.0.2
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	9.0.0
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	9.0.0a
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	le	8.6
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	8.7
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	9.0.1
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	9.0.2a
ibm:tealeaf_customer_experience	ibm tealeaf customer experience	eq	8.8

References

www-01.ibm.com/support/docview.wss?uid=swg21968866

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.8%

JSON

Related for CVE-2015-4989

ibm2 prion1 cvelist1