CVE-2015-4989

CWE-200 — Information Exposure3 documents3 sources

Severity

3.7LOW

EPSS

0.2%

top 56.91%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tealeaf Customer Experience

Timeline

PublishedJan 2

Latest updateMay 17

Description

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages1 packages

▶NVDibm/tealeaf_customer_experience8.6+8

🔴Vulnerability Details

GHSA

GHSA-35w2-fcvf-666f: The portal in IBM Tealeaf Customer Experience before 8↗2022-05-17

▶

CVEList

CVE-2015-4989: The portal in IBM Tealeaf Customer Experience before 8↗2016-01-02

▶