PT-2019-14475
CVE-2019-15930
·
Published
2019-12-12
·
Updated
2019-12-13
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Intesync Solismed version 3.3sp
Description
The issue allows Clickjacking, which is a technique used to trick users into clicking on something different from what they perceive.
Recommendations
For version 3.3sp, consider implementing frame busting techniques or using the X-Frame-Options header to restrict framing of the application, as a temporary workaround to minimize the risk of Clickjacking.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾