Security Bulletin: IBM Tealeaf Customer Experience is affected by a vulnerability in the Apache HTTP server, caused by an error in the mod_log_config module (CVE-2014-0098)

Workarounds and Mitigations

Customers can disable the PCA web console until mod_log_configure.so is updated to the version that fixes the vulnerability. If customers choose to disable the PCA web console, they can manually configure it by editing the Passive Capture Configuration and the Privacy Rules Configuration files as described below.

To disable the PCA web management console from starting up:
Refer to Disabling Web Server for the Web Console section in Passive Capture Guide.pdf

The basic steps are:
- From command line, enter the command:
tealeaf disable httpd
- Restart the PCA, enter the command:
tealeaf restart all
- A message is displayed indicating the web management console is disabled:
tealeaf: notice: httpd is disabled.

For the configuration file:
See section entitled: Passive Capture Configuration File

For privacy rules file:
See section entitled: PCA Web Console - Rules Tab
The actual rules format is detailed at the top of the configuration file itself.