CVE-2015-4988

CWE-22 — Path Traversal3 documents3 sources
Severity
8.6HIGH
EPSS
0.5%
top 34.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Tealeaf Customer Experience
Timeline
PublishedJan 18
Latest updateMay 17

Description

Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NExploitability: 3.9 | Impact: 4.0

Affected Packages1 packages

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-979j-7fmf-jxq3: Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8↗2022-05-17
▶
CVEList
CVE-2015-4988: Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8↗2016-01-18
▶