CVE-2017-1279

CVE-2017-1279: vulnerability in IBM Tealeaf Customer Experience

Published · Updated

Follow this CVE+ Monitor Tealeaf Customer Experience

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 124757.
Affected products
IBM · Tealeaf Customer Experience
Related CVEs — IBM Tealeaf Customer Experience

In the same product, most dangerous first.

CVE-2016-2983—CVE-2016-2983EPSS 1.7%CVE-2017-1204—CVE-2017-1204EPSS 1.6%