Security Bulletin: IBM Tealeaf Customer Experience allows unauthorized access to system files (CVE-2015-4988)

Summary The IBM Tealeaf Customer Experience replay server could allow an attacker to traverse directories and read any file on the Windows Server system hosting the server. Vulnerability Details CVEID: CVE-2015-4988 DESCRIPTION: The IBM Tealeaf Customer Experience replay server could allow an...

CVE-2015-4988

CVE-2015-4988 affects IBM Tealeaf Customer Experience replay server. A directory traversal vulnerability in affected 8.x/9.x releases enables remote attackers to read arbitrary files on Windows Server hosting the replay server. IBM lists multiple remedial versions (up to 9.0.2A/9.0.2 and correspo...