PT-2013-5556
CVE-2013-5462
·
تاريخ النشر
2013-12-19
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Content Navigator versions 2.0.0, 2.0.1 through 2.0.1.2-ICN-FP002, 2.0.2 through 2.0.2.1-ICN-FP001
Description
The issue allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements. This is related to the
IBM/ECMClient/configure/explodedformat/navigator/header.jsp file in IBM Content Navigator.Recommendations
For versions 2.0.0, 2.0.1 through 2.0.1.2-ICN-FP002, and 2.0.2 through 2.0.2.1-ICN-FP001, update to a fixed version, such as 2.0.1.2-ICN-FP002 or 2.0.2.1-ICN-FP001, to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾