Clickjacking Vulnerability in IBM App Connect Enterprise Certified Container
CVE-2020-4785
5.4MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 3 November 2020
Summary
A vulnerability in IBM App Connect Enterprise Certified Container allows remote attackers to hijack the victim's click actions through deceptive means. By tricking users into visiting a malicious website, attackers can exploit this issue to gain unauthorized access and potentially execute further attacks against the victim.
Affected Version(s)
App Connect Enterprise Certified Container 1.0.0
App Connect Enterprise Certified Container 1.0.1
App Connect Enterprise Certified Container 1.0.2
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved