CVE-2023-50938CWE-451
IBM PowerSC clickjacking
Medium · published February 2, 2024
What it is
IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 275128.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00401 · 33.2th percentile
- Weakness
- CWE-451 · User Interface (UI) Misrepresentation of Critical Information
- Published
- 2024-02-02T01:14Z
EPSS history
Timeline
02 FEB 01:14Z
IBM PowerSC clickjacking
cvelistv5