Security Bulletin: BigInsights is affected by multiple vulnerabilities in BigSheets and Data Server Manager (CVE-2017-1552, CVE-2017-1553, CVE-2017-1554)

Summary BigInsights is affected by multiple UI vulnerabilities in BigSheets and Data Server Manager DSM Vulnerability Details CVEID: CVE-2017-1552 DESCRIPTION: IBM Infosphere BigInsights is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote...

CVE-2017-1554

IBM Infosphere BigInsights 4.2.0 and 4.2.5 are affected by CVE-2017-1554, a UI vulnerability where a remote attacker could hijack a victim’s click actions by enticing them to visit a malicious Web site. The issue is described as a click/action hijack that could enable further attacks within the v...