CVE-2016-9010: Medium severity IBM Integration Bus vulnerability

Published Feb 15, 2017

Updated

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM Reference #: 1997906.

Affected Software

3 affected components

IBM Integration Bus=9.0

IBM Integration Bus=10.0

IBM WebSphere Message Broker=8.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21997906

Event History

Feb 15, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-9010?

CVE-2016-9010 is considered to have a moderate severity level due to the potential for remote clickjacking attacks.

How do I fix CVE-2016-9010?

To fix CVE-2016-9010, apply the latest patches provided by IBM for affected versions of IBM WebSphere Message Broker and IBM Integration Bus.

What versions of IBM software are affected by CVE-2016-9010?

CVE-2016-9010 affects IBM WebSphere Message Broker 8.0, 9.0, and 10.0 as well as IBM Integration Bus 9.0 and 10.0.

Can CVE-2016-9010 lead to further attacks?

Yes, CVE-2016-9010 can lead to further attacks if clickjacking is successfully exploited, allowing attackers to manipulate user actions.

Who is at risk from CVE-2016-9010?

Users of affected versions of IBM WebSphere Message Broker and IBM Integration Bus who visit malicious websites are at risk from CVE-2016-9010.