CVE-2017-1516: Input Validation
IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1516?
CVE-2017-1516 has a medium severity rating due to its potential for clickjacking attacks.
How do I fix CVE-2017-1516?
To fix CVE-2017-1516, update IBM DOORS Web Access to version 9.6.1.9 or apply any available patches from IBM.
What versions of IBM DOORS are affected by CVE-2017-1516?
CVE-2017-1516 affects IBM DOORS Web Access versions 9.5 and 9.6 up to specific release levels.
What type of attack does CVE-2017-1516 facilitate?
CVE-2017-1516 facilitates clickjacking attacks that can lead to unauthorized actions on behalf of the victim.
Can CVE-2017-1516 be exploited without user interaction?
Yes, CVE-2017-1516 requires user interaction, as it relies on persuading users to visit a malicious website.