CVE-2024-55896CWE-451

IBM PowerHA SystemMirror for i clickjacking

Medium · published January 3, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames.  This vulnerability could allow an attacker to gain improper access and perform unauthorized actions on the system.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2025-01-03T22:27Z
EPSS history
Timeline
  • 03 JAN 22:27Z
    IBM PowerHA SystemMirror for i clickjacking
    cvelistv5