IBM Datacap Navigator versions 9.1.7, 9.1.8, and 9.1.9 are vulnerable to a remote attack that can hijack the clicking actions of a victim. By tricking the victim into visiting a malicious website, an attacker could exploit this vulnerability to perform further attacks. This poses a significant risk to users of the affected versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2024-39730 |
Exploitation
To exploit this vulnerability, an attacker must convince the victim to visit a specially crafted malicious website. Once the victim interacts with the site, the attacker can hijack the victim’s click actions, potentially leading to unauthorized actions or data exposure.
Affected Products
- IBM Datacap Navigator 9.1.7: Affected by the vulnerability allowing click hijacking.
- IBM Datacap Navigator 9.1.8: Vulnerable to remote attacks that can exploit user interactions.
- IBM Datacap Navigator 9.1.9: Can be exploited through malicious web content to hijack user actions.
Mitigation
To mitigate this vulnerability, users should avoid clicking on untrusted links and ensure that they are using the latest version of IBM Datacap Navigator. Regular updates and security patches should be applied to protect against potential exploits.