Security Observation clickjack

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Observation - clickjacking

UIM 20.3.3 no hot fixes

We were able to set several URLs in a HTML frame. Clickjacking is when an attacker can load a page into an iFrame and trick the user into thinking that the iFrame is a different page

 

Environment

Release : 20.3

Component : UIM - SECURITY VULNERABILITIES

Resolution

Install the June 2021 UIM hot fix or later version of UIM.