Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56967
HistoryAug 04, 2022 - 12:00 a.m.

IBM CICS TX Advanced Clickjacking Vulnerability

2022-08-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 is vulnerable to a clickjacking vulnerability that stems from the program’s failure to adequately protect HTML iframes. remote attackers could exploit the vulnerability to hijack a victim’s click action and potentially launch further attacks against the victim.

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Related for CNVD-2022-56967