CVE-2019-4217: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim…

medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 159226.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	security_information_queue	—	—
ibm	security_information_queue	—	—
ibm	security_information_queue	—	—
samba	samba	>= 0 < 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4	2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

osv5.3MEDIUM