Security Bulletin: IBM Tealeaf Customer Experience servers allow unauthenticated access (CVE-2015-4987)

Summary IBM Tealeaf Customer Experience servers allow access to operational data and less privileged operations without authentication. Vulnerability Details CVEID: CVE-2015-4987 DESCRIPTION: The IBM Tealeaf Customer Experience search and replay servers could allow an unauthenticated attacker to...

CVE-2015-4987

The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896...

CVE-2015-4987

The CVE-2015-4987 entry describes an authentication bypass in IBM Tealeaf Customer Experience search and replay servers (versions 8.0–9.0.2). An unauthenticated remote attacker could bypass security and access certain product functionality and data. NVD data lists CVSS v2 base score 6.4 (MEDIUM) ...