Remote Clickjacking Vulnerability in IBM i2 Enterprise Insight Analysis
CVE-2018-1504

6.1MEDIUM

Key Information:

Vendor

IBM
Status
I2 Enterprise Insight Analysis
Vendor
CVE Published:
6 December 2018

What is CVE-2018-1504?

IBM i2 Enterprise Insight Analysis 2.1.7 is susceptible to a clickjacking vulnerability that can be exploited by a remote attacker. By convincing a victim to access a malicious website, attackers may hijack the victim's click actions, leading to unauthorized actions being executed on behalf of the user. This vulnerability could pave the way for further attacks, presenting serious security risks for users of the affected product.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

i2 Enterprise Insight Analysis 2.1.7

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/141340
vdb-entryx_refsource_XF
https://www.ibm.com/support/docview.wss?uid=ibm10738699
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.