CVE-2017-20109

Name of the Vulnerable Software and Affected Versions Teleopti WFM versions up to 7.1.0

Description A problematic issue was found in the Administration component of Teleopti WFM, specifically affecting an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant. This issue leads to information disclosure of credentials and can be exploited remotely. The exploit has been publicly disclosed.

Recommendations For versions up to 7.1.0, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the /TeleoptiWFM/Administration/GetOneTenant file to minimize the risk of exploitation.