Clickjacking Vulnerability in IBM Algorithmics One-Algo Risk Application
CVE-2016-0207

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Algo Risk Application
Vendor
CVE Published:
16 January 2018

What is CVE-2016-0207?

The IBM Algorithmics One-Algo Risk Application (ARA) versions 4.9.1 through 5.1.0 are susceptible to a clickjacking vulnerability. This flaw allows remote authenticated users to perform clickjacking attacks through unspecified vectors, potentially compromising user interactions and sensitive information. It is crucial for organizations using this application to assess their security posture and implement the necessary mitigations to safeguard against these risks.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21981322
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/109399
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.