CVE-2018-1853

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 151014.

Score

CVSS 3.1 6.1 Medium

Status

Modified - psirt@us.ibm.com

Published

2019-04-08

Last modified

2024-09-16

Weaknesses

CWE-1021

Affected products

• Spectrum Protect (Ibm)
• Spectrum Protect Backup-archive Client (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=ibm10870718
• https://exchange.xforce.ibmcloud.com/vulnerabilities/151014