Vulnerabilities > CVE-2016-5968 - Server-Side Request Forgery (SSRF) vulnerability in IBM Tealeaf Customer Experience

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

ibm

CWE-918

NVD

Published: 2016-11-25

Updated: 2016-11-28

Summary

The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3 allows remote attackers to conduct SSRF attacks via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Tealeaf Customer Experience 8.0 IBM Tealeaf Customer Experience 8.6 IBM Tealeaf Customer Experience 8.7 IBM Tealeaf Customer Experience 8.8 IBM Tealeaf Customer Experience 9.0.0 IBM Tealeaf Customer Experience 9.0.0A IBM Tealeaf Customer Experience 9.0.1 IBM Tealeaf Customer Experience 9.0.1A IBM Tealeaf Customer Experience 9.0.2 IBM Tealeaf Customer Experience 9.0.2A	10

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References