IBM Tealeaf Customer Experience 8.7/8.8/9.0.2 Request File path traversal

Summaryinfo

A vulnerability described as problematic has been identified in IBM Tealeaf Customer Experience 8.7/8.8/9.0.2. This affects an unknown part. The manipulation with the input /../ as part of Request results in path traversal (File). This vulnerability was named CVE-2017-1279. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability was found in IBM Tealeaf Customer Experience 8.7/8.8/9.0.2. It has been classified as problematic. Affected is an unknown code block. The manipulation with the input value /../ leads to a path traversal vulnerability (File). CWE is classifying the issue as CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. This is going to have an impact on confidentiality. CVE summarizes:

IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 124757.

The bug was discovered 01/23/2018. The weakness was presented 01/26/2018 (Website). The advisory is shared for download at ibm.com. This vulnerability is traded as CVE-2017-1279 since 11/30/2016. The exploitability is told to be easy. It is possible to launch the attack remotely. The requirement for exploitation is a authentication. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/01/2021). It is expected to see the exploit prices for this product increasing in the near future.The MITRE ATT&CK project declares the attack technique as T1006.

The vulnerability was handled as a non-public zero-day exploit for at least 3 days. During that time the estimated underground price was around $5k-$25k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-112480 for similar entry. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• IBM

Name

• Tealeaf Customer Experience

Version

• 8.7
• 8.8
• 9.0.2

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion