Clickjacking Vulnerability in IBM App Connect Enterprise Certified Container
CVE-2020-4785

5.4MEDIUM

Key Information:

Vendor

IBM
Status
App Connect Enterprise Certified Container
Vendor
CVE Published:
3 November 2020

What is CVE-2020-4785?

A vulnerability in IBM App Connect Enterprise Certified Container allows remote attackers to hijack the victim's click actions through deceptive means. By tricking users into visiting a malicious website, attackers can exploit this issue to gain unauthorized access and potentially execute further attacks against the victim.

Affected Version(s)

App Connect Enterprise Certified Container 1.0.0

App Connect Enterprise Certified Container 1.0.1

App Connect Enterprise Certified Container 1.0.2

References

https://www.ibm.com/support/pages/node/6357899
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/189219
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-4785 : Clickjacking Vulnerability in IBM App Connect Enterprise Certified Container