CVE-2017-2658

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

CVE-2017-2658

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

Design/Logic Flaw

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

CVE-2017-2658

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

CVE-2017-2658

The CVE affects Red Hat JBoss BPM Suite <6.4.2 and JBoss Data Virtualization & Services

PT-2018-7163 · Red Hat · Red Hat Jboss Data Virtualization & Services +1

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss BPM Suite versions prior to 6.4.2 Red Hat JBoss Data Virtualization & Services versions prior to 6.4.3 Description: A security issue was found in the Dashbuilder login page, which could be opened in an IFRAME. This allowed for t...

CVE-2017-2658: Improper Input Validation

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

Dashbuilder: Lack of clickjacking protection on the login page

It was discovered that the Dashbuilder login page could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console clickjacking...

Low: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4 Update 3 security update

An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

Security Bulletin: Rational ClearCase and ClearQuest Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Summary Java API Documentation contains a frame injection vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVEID: CVE-2013-1571...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

Security feature bypass

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12576

CVE-2018-12576 affects TP-Link TL-WR841N v13 (firmware 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n). The issue is a clickjacking vulnerability in the device’s web UI. CVSSv3.0 shows an attacker would need network access with user interaction required to trigger impact on UI integrity, with no conf...

PT-2018-11262

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Description The issue allows clickjacking, which is a technique used to trick users into performing unintended actions on a website. Recommendations For TP-Link TL-WR841N...

CVE-2018-12576: Improper Restriction of Rendered UI Layers or Frames

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

VK.com: Clickjacking vkpay

Clickjacking...

OLX: Bypass CSP frame-ancestors at olx.co.za, olx.com.gh

Hi, olx.co.za and olx.com.gh both of them restrict framing by using this CSP rule: content-security-policy: frame-ancestors 'self' https://.mod-tools.com: olx.co.za: F313178 olx.com.gh: F313179 If we take a look at mod-tools.com we can see that the domain is not claimed: $ dig mod-tools.com ; DiG...

Security Bulletin: IBM TRIRIGA default login page has no defenses against clickjacking (CVE-2017-1465)

Summary IBM TRIRIGA could allow a remote attacker to hijack the clicking action of the victim. Vulnerability Details CVEID: CVE-2017-1465 DESCRIPTION: IBM TRIRIGA could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a...