PT-2023-18983 · Ibm · Ibm Sterling Partner Engagement Manager

CVE-2023-23482

·

Publicado

2023-06-08

·

Atualizado

2023-06-13

CVSS v3.1

9.6

Crítica

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.1 through 6.2.1
Description The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this to hijack the victim's click actions and possibly launch further attacks against the victim.
Recommendations For versions 6.1, 6.2, and 6.2.1, update to a version that includes a fix for this issue, as no specific workaround is provided in the given information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2023-23482

Produtos afetados

Ibm Sterling Partner Engagement Manager