PT-2016-3640

CVE-2015-4960

·

Published

2016-01-17

·

Updated

2016-01-20

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1 through 11.0 before 11.0.0.0 IF11 IBM InfoSphere Master Data Management - Collaborative Edition version 11.3 before 11.3.0.0 IF7 IBM InfoSphere Master Data Management - Collaborative Edition version 11.4 before 11.4.0.4 IF1
Description The issue allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
Recommendations For versions 9.1 through 11.0 before 11.0.0.0 IF11, update to version 11.0.0.0 IF11 or later. For version 11.3 before 11.3.0.0 IF7, update to version 11.3.0.0 IF7 or later. For version 11.4 before 11.4.0.4 IF1, update to version 11.4.0.4 IF1 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-254
Related identifiers
CVE-2015-4960
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com