CVE-2016-5996

High

Published: 26/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The web portal in IBM Tealeaf Customer Experience before version 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A does not enforce password-length restrictions, making it easier for remote attackers to gain access via a brute-force attack.

Risk Assessment

The lack of password-length restrictions increases the risk of successful brute-force attacks, potentially leading to unauthorized access to the system.

Recommendation

It is recommended to upgrade to the latest version of the software that enforces password-length restrictions.

Other vulnerabilities in IBM Tealeaf Customer Experience

CVE-2015-4988High
A directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience allows remote attackers to read arbitrary files. This affects versions before 8.7.1.8818, 8.8 before 8.8.0.9026, and 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144.

Original NVD description (English source)

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.