IBM Content Navigator CVE-2013-5462 Clickjacking Vulnerability
BID:64384
Info
IBM Content Navigator CVE-2013-5462 Clickjacking Vulnerability
| Bugtraq ID: | 64384 |
| Class: | Design Error |
| CVE: |
CVE-2013-5462 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2013 12:00AM |
| Updated: | Dec 16 2013 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Content Navigator 2.0.2 IBM Content Navigator 2.0.1 IBM Content Navigator 2.0 |
| Not Vulnerable: | |
Discussion
IBM Content Navigator CVE-2013-5462 Clickjacking Vulnerability
IBM Content Navigator is prone to a clickjacking vulnerability because it fails to perform validity checks on certain user actions through HTTP requests via frames.
Successful exploits will allow an attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
IBM Content Navigator 2.0.0, 2.0.1, and 2.0.2 are vulnerable.
IBM Content Navigator is prone to a clickjacking vulnerability because it fails to perform validity checks on certain user actions through HTTP requests via frames.
Successful exploits will allow an attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
IBM Content Navigator 2.0.0, 2.0.1, and 2.0.2 are vulnerable.
Exploit / POC
IBM Content Navigator CVE-2013-5462 Clickjacking Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
References
IBM Content Navigator CVE-2013-5462 Clickjacking Vulnerability
References:
References: