IBM InfoSphere Information Server Web Console Interface Clickjacking Vulnerability
BID:62767
Info
IBM InfoSphere Information Server Web Console Interface Clickjacking Vulnerability
| Bugtraq ID: | 62767 |
| Class: | Design Error |
| CVE: |
CVE-2013-4066 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 30 2013 12:00AM |
| Updated: | Mar 19 2015 09:09AM |
| Credit: | IBM |
| Vulnerable: |
IBM InfoSphere Information Server 8.5 IBM InfoSphere Information Server 8.1 IBM InfoSphere Information Server 8.0 |
| Not Vulnerable: | |
Discussion
IBM InfoSphere Information Server Web Console Interface Clickjacking Vulnerability
IBM InfoSphere Information Server is prone to a clickjacking vulnerability.
Successful exploits will allow an authenticated attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
InfoSphere Information Server 8.0.1, 8.1, 8.5, 8.7, and 9.1 are vulnerable. other versions may also be affected.
IBM InfoSphere Information Server is prone to a clickjacking vulnerability.
Successful exploits will allow an authenticated attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
InfoSphere Information Server 8.0.1, 8.1, 8.5, 8.7, and 9.1 are vulnerable. other versions may also be affected.
Exploit / POC
IBM InfoSphere Information Server Web Console Interface Clickjacking Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
Solution / Fix
IBM InfoSphere Information Server Web Console Interface Clickjacking Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.