Security Bulletin: WebSphere Message Broker / IBM Integration Bus WEBUI does not set X-FRAME-OPTIONS (CVE-2016-9010)

Summary WebSphere Message Broker / IBM Integration Bus WEBUI does not set X-FRAME-OPTIONS Vulnerability Details CVEID: CVE-2016-9010 DESCRIPTION: IBM WebSphere Message Broker could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious web...

CVE-2016-9010

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

CVE-2016-9010

CVE-2016-9010 affects IBM WebSphere Message Broker and IBM Integration Bus (including V8, V9, V10 branches). The vulnerability is a clickjacking flaw caused by not setting the X-Frame-OPTIONS header in the Web UI, enabling a remote attacker to hijack a user’s click actions by luring them to a mal...