PT-2025-5789 · Ibm · Ibm Applinx

Published 2025-02-05 · Updated 2025-02-13 · CVE-2024-49796

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: IBM ApplinX version 11.1

Description: The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

Recommendations: For IBM ApplinX version 11.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-1021

CWE-451

Related Identifiers

CVE-2024-49796

Affected Products

Ibm Applinx

References · 8

• https://osv.dev/vulnerability/CVE-2024-49796 · Vendor Advisory
• https://ibm.com/support/pages/node/7182522 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49796 · Security Note
• https://twitter.com/CVEnew/status/1887305134876860441 · Twitter Post
• https://t.me/cvenotify/110203 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1887436530605601062 · Twitter Post
• https://t.me/cvenotify/111184 · Telegram Post
• https://t.me/cvedetector/17360 · Telegram Post