CVE-2021-39038

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server Liberty versions 17.0.0.3 through 22.0.0.2

Description The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

Recommendations For IBM WebSphere Application Server 9.0, update to a version that includes the fix for this issue. For IBM WebSphere Application Server Liberty versions 17.0.0.3 through 22.0.0.2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to malicious Web sites to minimize the risk of exploitation.