5.4

CVE-2020-4406

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Spectrum Protect Client Version >= 8.1.7.0 <= 8.1.9.1
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Spectrum Protect Client Version >= 8.1.9.0 <= 8.1.9.1
   Ibm ≫ Aix Version -
Ibm ≫ Spectrum Protect For Space Management Version >= 8.1.7.0 <= 8.1.9.1
   Linux ≫ Linux Kernel Version -
Ibm ≫ Spectrum Protect For Space Management Version >= 8.1.9.0 <= 8.1.9.1
   Ibm ≫ Aix Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.82% 0.525
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.3 2.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
IBM 5.4 2.3 2.7
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE-1021 Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.

https://exchange.xforce.ibmcloud.com/vulnerabilities/179488
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/6221448
Vendor Advisory