CVE-2013-5462

Name of the Vulnerable Software and Affected Versions IBM Content Navigator versions 2.0.0, 2.0.1 through 2.0.1.2-ICN-FP002, 2.0.2 through 2.0.2.1-ICN-FP001

Description The issue allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements. This is related to the IBM/ECMClient/configure/explodedformat/navigator/header.jsp file in IBM Content Navigator.

Recommendations For versions 2.0.0, 2.0.1 through 2.0.1.2-ICN-FP002, and 2.0.2 through 2.0.2.1-ICN-FP001, update to a fixed version, such as 2.0.1.2-ICN-FP002 or 2.0.2.1-ICN-FP001, to resolve the issue.