VDB-156761 · CVE-2020-4406 · XFDB 179488

IBM Spectrum Protect up to 8.1.9.1 Web User Interface clickjacking

A vulnerability was found in IBM Spectrum Protect up to 8.1.9.1 (Backup Software). It has been rated as critical. This issue affects an unknown part of the component Web User Interface. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10553823	10/24/2020	VulD...	cve_cna	IBM Corporation	nvd.nist.gov	10/24/2020	accepted	70
10553822	10/24/2020	VulD...	xforce	179488	cve.mitre.org	10/24/2020	accepted	70
10553821	10/24/2020	VulD...	confirm_url	https://www.ibm.com/support/pages/node/6221448	cve.mitre.org	10/24/2020	accepted	70
10173690	06/16/2020	VulD...	cwe	451 (privilege escalation)		06/16/2020	accepted	90
10173688	06/16/2020	VulD...	cve_nvd_summary	IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.	mitre.org	06/16/2020	accepted	100
10173687	06/16/2020	VulD...	cve_assigned	1577664000	mitre.org	06/16/2020	accepted	100
10173681	06/16/2020	VulD...	cvss3_nvd_a	N	nist.gov	06/16/2020	accepted	100
10173680	06/16/2020	VulD...	cvss3_nvd_i	L	nist.gov	06/16/2020	accepted	100
10173679	06/16/2020	VulD...	cvss3_nvd_c	L	nist.gov	06/16/2020	accepted	100
10173678	06/16/2020	VulD...	cvss3_nvd_s	C	nist.gov	06/16/2020	accepted	100
10173677	06/16/2020	VulD...	cvss3_nvd_ui	R	nist.gov	06/16/2020	accepted	100
10173676	06/16/2020	VulD...	cvss3_nvd_pr	L	nist.gov	06/16/2020	accepted	100
10173675	06/16/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/16/2020	accepted	100
10173674	06/16/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/16/2020	accepted	100
10173648	06/16/2020	VulD...	type	Backup Software		06/16/2020	accepted	100
10173698	06/16/2020	VulD...	cvss3_nvd_basescore	5.4	nist.gov	06/16/2020	accepted	90
10173697	06/16/2020	VulD...	cvss3_vuldb_rc	X		06/16/2020	accepted	90
10173696	06/16/2020	VulD...	cvss3_vuldb_rl	X		06/16/2020	accepted	90
10173695	06/16/2020	VulD...	cvss3_vuldb_e	X		06/16/2020	accepted	90
10173694	06/16/2020	VulD...	cvss2_vuldb_rc	ND		06/16/2020	accepted	90