PT-2017-8299
CVE-2016-3020
·
تاريخ النشر
2017-02-07
·
تاريخ التحديث
2020-10-27
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager for Web versions 7.0.0 through 9.0.0
Description
The issue is caused by improper content validation, allowing a remote attacker to bypass security restrictions. An attacker could exploit this by persuading a victim to open specially-crafted content, which could then load a page with malicious content.
Recommendations
For versions 7.0.0 through 9.0.0, update the content validation mechanism to properly check and restrict malicious content.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾