CVE-2015-4988

High

Published: 18/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience allows remote attackers to read arbitrary files. This affects versions before 8.7.1.8818, 8.8 before 8.8.0.9026, and 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144.

Risk Assessment

Attackers may gain access to sensitive data stored on the server, potentially leading to privacy breaches and security risks for the organization.

Recommendation

It is recommended to upgrade to the latest version of IBM Tealeaf Customer Experience to eliminate this vulnerability and secure the system against potential attacks.

Other vulnerabilities in IBM Tealeaf Customer Experience

CVE-2016-5996High
The web portal in IBM Tealeaf Customer Experience before version 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A does not enforce password-length restrictions, making it easier for remote attackers to gain access via a brute-force attack.

Original NVD description (English source)

Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors.