CVE-2020-4406

CVSS 5.4 MEDIUMEPSS 0.8%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.4EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 jun 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.

CVSS:3.0/AV:N/C:L/PR:L/AC:L/UI:R/S:C/A:N/I:L/E:U/RC:C/RL:O

Produtos afetados

IBM · Spectrum Protect Client (AIX)IBM · Spectrum Protect Client (Linux and Windows)IBM · Spectrum Protect for Space Management (AIX)IBM · Spectrum Protect for Space Management (Linux)

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/179488 https://www.ibm.com/support/pages/node/6221448