PT-2019-16970 · Ibm · Ibm Smartcloud Analytics

Published 2019-11-22 · Updated 2021-07-21 · CVE-2019-4215

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM SmartCloud Analytics versions 1.3.1 through 1.3.5

Description The issue allows a remote attacker to hijack the clicking action of the victim. This can be achieved by persuading a victim to visit a malicious Web site, which could then exploit this issue to hijack the victim's click actions and possibly launch further attacks against the victim.

Recommendations For IBM SmartCloud Analytics versions 1.3.1 through 1.3.5, update to a version outside of the affected range to resolve the issue.

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2019-4215

Affected Products

Ibm Smartcloud Analytics

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/159186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4215 · Security Note
• https://ibm.com/support/pages/node/1109769 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4215 · Vendor Advisory