Korean
<< Back
VID 22998
Severity 30
Port 8880, ...
Protocol TCP
Class WWW
Detailed Description 'The IBM WebSphere Application Server running on the remote host is 9.x prior to 9.0.5.12. It is, therefore, affected by a clickjacking vulnerability. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

* References :
https://www.ibm.com/support/pages/node/6559044

* Platforms Affected:
IBM WebSphere Application Server 9.0.x prior to 9.0.5.12
Any operating system Any version
Recommendation Upgrade to the latest version of IBM WebSphere Application Server 9.0.5.12 or later, available from the IBM Support & downloads Web site at https://www.ibm.com/support/pages/node/6559044
Related URL CVE-2021-39038 (CVE)
Related URL (SecurityFocus)
Related URL (ISS)