Description
IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the TLS certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
References (1)
Core 1
Core References
Mitigation, Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21994534
Scores
CVSS v3
5.9
EPSS
0.0010
EPSS Percentile
27.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (2)
ibm/tealeaf_customer_experience_on_cloud_network_capture_add-on
16.1.01
IBM Corporation/Tealeaf Customer Experience
16.1.01
Published
Feb 08, 2017
Tracked Since
Feb 18, 2026