CVE-2016-2983 — HIGH (8.1) — White Hats Nepal

Vulnerability Description

IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of service, or bypass security. IBM X-Force ID: 113999.

CVSS Score

8.1

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ibm	Tealeaf Customer Experience	8.7

Related Weaknesses (CWE)

CWE-20

References

http://www.ibm.com/support/docview.wss?uid=swg22006393PatchVendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006455PatchVendor Advisory
http://www.securityfocus.com/bid/102891Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/113999Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006393PatchVendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006455PatchVendor Advisory
http://www.securityfocus.com/bid/102891Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/113999Vendor Advisory

FAQ

What is CVE-2016-2983?

CVE-2016-2983 is a vulnerability with a CVSS score of 8.1 (HIGH). IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of ser...

How severe is CVE-2016-2983?

CVE-2016-2983 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-2983?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Tealeaf Customer Experience.