CVE-2021-29827 — UI Misrepresentation / Clickjacking in IBM Infosphere Information Server

CWE-1021 — UI Misrepresentation / Clickjacking3 documents3 sources
Severity
5.2MEDIUMNVD
EPSS
0.0%
top 88.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedDec 19

Description

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.1 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-5w3w-7p48-725j: IBM InfoSphere Information Server 11↗2024-12-19
▶
CVEList
IBM InfoSphere Information Server clickjacking↗2024-12-18
▶
CVE-2021-29827 — UI Misrepresentation / Clickjacking | cvebase