description: IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.
problem types: Gain Access
affected:
{
product: Spectrum Protect Client (Linux and Windows)
vendor: IBM
versions:
status: affected, version: 8.1.7.0
status: affected, version: 8.1.9.1
}
{
product: Spectrum Protect Client (AIX)
vendor: IBM
versions:
status: affected, version: 8.1.9.0
status: affected, version: 8.1.9.1
}
{
product: Spectrum Protect for Space Management (AIX)
vendor: IBM
versions:
status: affected, version: 8.1.9.0
status: affected, version: 8.1.9.1
}
{
product: Spectrum Protect for Space Management (Linux)
vendor: IBM
versions:
status: affected, version: 8.1.7.0
status: affected, version: 8.1.9.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: CHANGED
temporalScore: 4.7
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/C:L/PR:L/AC:L/UI:R/S:C/A:N/I:L/E:U/RC:C/RL:O
version: 3.0
]