Design/Logic Flaw

2013-08-0613:20:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.6%

JSON

IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.

CPENameOperatorVersion
infosphere_biginsightseq1.2.0.0
infosphere_biginsightseq2.0.0.0
infosphere_biginsightseq1.1.0.1
infosphere_biginsightseq1.1.0.0
infosphere_biginsightseq1.3.0.0
infosphere_biginsightseq2.1.0.0
infosphere_biginsightseq1.1.0.2
infosphere_biginsightseq1.3.0.1
infosphere_biginsightseq1.4.0.0

Name	Operator	Version
infosphere_biginsights	eq	1.2.0.0
infosphere_biginsights	eq	2.0.0.0
infosphere_biginsights	eq	1.1.0.1
infosphere_biginsights	eq	1.1.0.0
infosphere_biginsights	eq	1.3.0.0
infosphere_biginsights	eq	2.1.0.0
infosphere_biginsights	eq	1.1.0.2
infosphere_biginsights	eq	1.3.0.1
infosphere_biginsights	eq	1.4.0.0