CVE-2020-4406

Summary

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.

Affected Software

VendorProductVersion RangeStatus
IBMSpectrum Protect Client (Linux and Windows)8.1.7.0affected
IBMSpectrum Protect Client (Linux and Windows)8.1.9.1affected
IBMSpectrum Protect Client (AIX)8.1.9.0affected
IBMSpectrum Protect Client (AIX)8.1.9.1affected
IBMSpectrum Protect for Space Management (AIX)8.1.9.0affected
IBMSpectrum Protect for Space Management (AIX)8.1.9.1affected
IBMSpectrum Protect for Space Management (Linux)8.1.7.0affected
IBMSpectrum Protect for Space Management (Linux)8.1.9.1affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References