IBM Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On

Jul 11, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

Multiple vulnerabilities in Apache HTTPD can cause denial of service and allow a remote attacker to bypass security restrictions and obtain sensitive information in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On. A Vulnerability in the Memcached library used by the IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could permit a denial of service attack. A Vulnerability in the OpenSSL library used by the IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could permit a a remote attacker to obtain sensitive information.

CVE(s): CVE-2017-7679, CVE-2017-7668, CVE-2017-3169, CVE-2017-9951, CVE-2017-3735

Affected product(s) and affected version(s):

IBM Tealeaf Customer Experience on Cloud Network Capture Add-On 16.1.01.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22016643
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/127420
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/127419
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/127417
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128607
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131047

from IBM Product Security Incident Response Team https://ift.tt/2umAp9D