CVE-2015-4990

published 2016-01-02

CVE-2015-4990: The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2…

medium 4 CVSS 3.0

AV L AC H PR H UI R S U C H I N A N

The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified connection type.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
ibm	tealeaf_customer_experience	<= 8.6	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—
ibm	tealeaf_customer_experience	—	—

CWE-200