CVE-2017-1465

Summary

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464.

Affected Software

VendorProductVersion RangeStatus
IBMTRIRIGA Application Platform3.3affected
IBMTRIRIGA Application Platform3.3.1affected
IBMTRIRIGA Application Platform3.3.2affected
IBMTRIRIGA Application Platform3.4affected
IBMTRIRIGA Application Platform3.4.1affected
IBMTRIRIGA Application Platform3.4.2affected
IBMTRIRIGA Application Platform3.5affected
IBMTRIRIGA Application Platform3.5.1affected
IBMTRIRIGA Application Platform3.5.2affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References