VID |
22998 |
Severity |
30 |
Port |
8880, ... |
Protocol |
TCP |
Class |
WWW |
Detailed Description |
'The IBM WebSphere Application Server running on the remote host is 9.x prior to 9.0.5.12. It is, therefore, affected by a clickjacking vulnerability. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
* References : https://www.ibm.com/support/pages/node/6559044
* Platforms Affected: IBM WebSphere Application Server 9.0.x prior to 9.0.5.12 Any operating system Any version |
Recommendation |
Upgrade to the latest version of IBM WebSphere Application Server 9.0.5.12 or later, available from the IBM Support & downloads Web site at https://www.ibm.com/support/pages/node/6559044 |
Related URL |
CVE-2021-39038 (CVE) |
Related URL |
(SecurityFocus) |
Related URL |
(ISS) |
|