medium6.1
CVE-2023-23126
Connectwise Automate 2022.11 is vulnerable to Clickjacking.
Impact
Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and used to manipulate users to perform unintended actions. NOTE: the vendor's position is that a Content-Security-Policy HTTP response header is present to block this attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Connectwise | Automate | Version 2022.11 |