CVE-2023-45698

CVSS 3.1 Score 4.8 of 10 (medium)

Details

Published Feb 10, 2024
Updated: Feb 11, 2024

Summary

CVE-2023-45698: Sametime, an IBM collaboration software, is vulnerable to clickjacking attacks due to insufficient security measures in its Outlook add-in. The add-in fails to implement adequate clickjacking protections, leaving users susceptible to potential manipulation and data theft through malicious websites or applications. Attackers could exploit this weakness to force users into performing unwanted actions without their knowledge or consent. IBM is encouraged to release a patch to address this issue and advise users to exercise caution when using the add-in.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share