CVEvulnerability
CVE-2015-0127
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-06-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks via a crafted web site.
Affected configurations
• ibm leads 7.1.0
• ibm leads 7.1.1
• ibm leads 7.5.0
• ibm leads 8.1.0
• ibm leads 8.2.0
• ibm leads 8.5.0
• ibm leads 8.6.0
• ibm leads 9.0.0
• ibm leads 9.1.0
• ibm leads 9.1.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21902807 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21902807 Vendor Advisory