2.6
Faible
CVE-2017-2658 It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data…
Description
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking).
Produits et versions touchés
Références
- RHSA-2017:0557 rhn.redhat.com
- RHSA-2018:2243 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- 97025 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification