| Title | IBM Tealeaf Customer Experience の再生サーバにおけるディレクトリトラバーサルの脆弱性 |
|---|---|
| Summary | IBM Tealeaf Customer Experience の再生サーバには、ディレクトリトラバーサルの脆弱性が存在します。 |
| Possible impacts | 第三者により、任意のファイルを読まれる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | June 24, 2015, midnight |
| Registration Date | Jan. 26, 2016, 1:36 p.m. |
| Last Update | Jan. 26, 2016, 1:36 p.m. |
| CVSS2.0 : 危険 | |
| Score | 7.8 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
| IBM |
| IBM Tealeaf Customer Experience 8.7.1.8818 未満 |
| IBM Tealeaf Customer Experience 8.8.0.9026 未満の 8.8 |
| IBM Tealeaf Customer Experience 9.0.0 |
| IBM Tealeaf Customer Experience 9.0.0A |
| IBM Tealeaf Customer Experience 9.0.1.1083 未満の 9.0.1 |
| IBM Tealeaf Customer Experience 9.0.1.5073 未満の 9.0.1A |
| IBM Tealeaf Customer Experience 9.0.2.1095 未満の 9.0.2 |
| IBM Tealeaf Customer Experience 9.0.2.5144 未満の 9.0.2A |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2016年01月26日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors. |
|---|---|
| Publication Date | Jan. 18, 2016, 2:59 p.m. |
| Registration Date | Jan. 26, 2021, 2:51 p.m. |
| Last Update | Nov. 21, 2024, 11:32 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:* | 8.6 | ||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:* | |||||