PT-2019-16970
CVE-2019-4215
·
تاريخ النشر
2019-11-22
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IBM SmartCloud Analytics versions 1.3.1 through 1.3.5
Description
The issue allows a remote attacker to hijack the clicking action of the victim. This can be achieved by persuading a victim to visit a malicious Web site, which could then exploit this issue to hijack the victim's click actions and possibly launch further attacks against the victim.
Recommendations
For IBM SmartCloud Analytics versions 1.3.1 through 1.3.5, update to a version outside of the affected range to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾