Security Bulletin: IBM Tealeaf Customer Experience Replay Server internal proxy accepts connections from external sources (CVE-2016-5968)

Summary The internal HTTP proxy server deployed as part of the IBM Tealeaf Customer Experience Replay Server accepts requests from any network host, not only from local renderers. Vulnerability Details CVEID: CVE-2016-5968 DESCRIPTION: IBM Tealeaf Replay Server allows remote attackers to use one ...

CVE-2016-5968

CVE-2016-5968 affects IBM Tealeaf Customer Experience Replay Server: SSRF vulnerability allowing remote proxies to forward HTTP requests to internal/external resources. Affected product versions include Replay Server 8.x (before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9), 9.0.0/9.0.1 before 9....