CVE-2019-4109 - IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim

Back Back to CVE browser

MEDIUM

IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim

Published Sep 30, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 1.25%

Description

IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 158102.

Affected products

Vendor IBM Product WebSphere eXtreme Scale Default
n/a
- Version
  8.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

WebSphere eXtreme Scale

n/a

Version	Status	Constraints
8.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1021

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13716
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/158102
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1073864
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13716		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/158102		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1073864		x_refsource_CONFIRMVendor Advisory