Security Bulletin: IBM Sterling B2B Integrator is affected by Click jacking vulnerability (CVE-2015-4992)

Summary A Click jacking also known as a "UI redress attack" vulnerability has been discovered in IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2015-4992 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to hijack the clicking action of the...

CVE-2015-4992

IBM Sterling B2B Integrator (versions 5.1 and 5.2) is affected by CVE-2015-4992, a clickjacking vulnerability. A remote attacker could hijack a user’s click actions by luring them to a malicious page, enabling UI redress attacks. Remediation in the IBM advisories involves applying interim fixes: ...