CVE-2016-5996 Weak cryptography in n/a

What is CVE-2016-5996?

CVE-2016-5996 is a high-severity vulnerability in n/a, published on 26 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.

Weakness: CWE-640

Which versions are affected by CVE-2016-5996?

It affects 1 product.

Products include Ibm Tealeaf Customer Experience.

How do I fix CVE-2016-5996?

No fix has been published for CVE-2016-5996 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-5996 being exploited?

There is no known exploitation of CVE-2016-5996 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-1204 Hardcoded credentials in Tealeaf Customer Experience Critical 9.8
• CVE-2015-4988 Path traversal in n/a High 8.6
• CVE-2016-2983 Information disclosure in Tealeaf Customer Experience High 8.1
• CVE-2016-5977 Open redirect in n/a Medium 6.8
• CVE-2015-4987 Auth bypass in n/a Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mxvf-fgg2-9qxj.