medium5.4
CVE-2019-4035
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site.
Impact
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Content Navigator | Version 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=ibm10869060
- http://www.securityfocus.com/bid/107557
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156001
- http://www.ibm.com/support/docview.wss?uid=ibm10869060
- http://www.securityfocus.com/bid/107557
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156001