Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-39727 EUVD-2024-38017GHSA-8qcf-755r-4vhw

IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing

Published Dec 25, 2024 · Updated Dec 26, 2024 · Assigned by ibm

Description

IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.

Affected products

VendorProductAffectedFixed
IBM Engineering Insights 7.0.2, 7.0.3 —

References