IBM Security Bulletin: IBM API Connect is affected by a clickjacking vulnerability (CVE-2018-1599)

IBM API Connect has addressed the following vulnerability. API Connect could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious website, a remote attacker could exploit this vulnerability to hijack the victim’s click actions and possibly launch further attacks against the victim.

CVE(s): CVE-2018-1599

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22016672
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143744

The post IBM Security Bulletin: IBM API Connect is affected by a clickjacking vulnerability (CVE-2018-1599) appeared first on IBM PSIRT Blog.

Affected API Connect	Affected Versions
IBM API Connect	5.0.0.0-5.0.8.4

from IBM Product Security Incident Response Team https://ift.tt/2MtgmCe