5.4

CVE-2020-4547

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Engineering Insights Version 7.0
Ibm ≫ Engineering Test Management Version 7.0.0
Ibm ≫ Engineering Workflow Management Version 6.0.6.1
Ibm ≫ Rational Quality Manager Version 6.0.2
Ibm ≫ Rational Quality Manager Version 6.0.6
Ibm ≫ Rational Quality Manager Version 6.0.6.1
Ibm ≫ Rhapsody Design Manager Version 6.0.2
Ibm ≫ Rhapsody Design Manager Version 6.0.6
Ibm ≫ Rhapsody Design Manager Version 6.0.6.1
Ibm ≫ Rhapsody Design Manager Version 7.0
Ibm ≫ Rhapsody Model Manager Version 6.0.2
Ibm ≫ Rhapsody Model Manager Version 6.0.6
Ibm ≫ Rhapsody Model Manager Version 6.0.6.1
Ibm ≫ Rhapsody Model Manager Version 7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.82% 0.524
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.3 2.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
IBM 5.4 2.3 2.7
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE-1021 Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.

https://www.ibm.com/support/pages/node/6408694
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/183315
Vendor Advisory
VDB Entry