CVEvulnerability

CVE-2013-0518

4.3 MEDIUM Published 2013-05-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 does not refuse to be rendered in different-origin frames, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Affected configurations

• ibm sterling secure proxy 3.2.0.0 • ibm sterling secure proxy 3.3.0.1 • ibm sterling secure proxy 3.4.0.0 • ibm sterling secure proxy 3.4.1.0 • ibm sterling secure proxy 3.4.1.2 • ibm sterling secure proxy 3.4.1.5 • ibm sterling secure proxy 3.4.1.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References