Clickjacking Vulnerability in IBM BigFix Platform

CVE-2018-1478

What is CVE-2018-1478?

The IBM BigFix Platform versions 9.2.0 through 9.2.14 and 9.5 through 9.5.9 are susceptible to a clickjacking vulnerability. This security weakness can be exploited by remote attackers who entice users to visit a malicious website. Once on the site, attackers can hijack the user's click actions, potentially enabling them to perform unauthorized actions on behalf of the victim. The vulnerability presents significant risks as it may facilitate further attacks against compromised user accounts.

References