Security Bulletin: Multiple vulnerabilities exist in IBM InfoSphere BigInsights (CVE-2013-3996, CVE-2013-3995, CVE-2013-3992)

Abstract Vulnerabilities have been identified in IBM InfoSphere BigInsights which make the product vulnerable to attacks using cross-site scripting, phishing through frames and cross-site request forgery. Content VULNERABILITY DETAILS CVE ID: CVE-2013-3996 Description: An attacker can initiate a...

CVE-2013-3996

CVE-2013-3996 affects IBM InfoSphere BigInsights v1.1–v2.1. The issue is a flaw in how FRAME elements are handled, enabling phishing via a crafted web site when the user is authenticated. The IBM bulletin confirms vulnerability to phishing through frames and cross-site scripting-type risks, with ...