Description
IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | InfoSphere Information Server | 8.1, 8.5, 8.0, 8.5.0.1, 8.7, 9.1, 8.0.1, 10.0, 11.3, 10, 11.3.0.0, 11.3.1.0, 11.5 | — |
References
- 1037564 vdb-entry
- 95324 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21995257