PT-2020-18246

CVE-2020-4785

·

Published

2020-11-03

·

Updated

2020-11-10

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 1.0.0 through 1.0.4
Description A remote attacker could hijack the clicking action of a victim by persuading them to visit a malicious Web site, potentially launching further attacks against the victim.
Recommendations For versions 1.0.0 through 1.0.4, update to a version that includes a fix for this issue to prevent remote attackers from hijacking the victim's click actions.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾