IBM Datacap Clickjacking Vulnerability

A clickjacking vulnerability has been identified in IBM Datacap versions 9.1.7, 9.1.8, and 9.1.9. This vulnerability could allow a remote attacker to hijack the clicking actions of a victim. By convincing the victim to visit a malicious website, the attacker could exploit this vulnerability to take control of the victim's click actions, potentially leading to further attacks against the victim.

Impact

Exploitation of this vulnerability could allow for clickjacking, where an attacker tricks a user into clicking on something different from what the user perceives, potentially leading to unauthorized actions being performed on behalf of the user.

Remediation

Users are advised to upgrade to IBM Datacap version 9.1.9 Interim Fix 007. Details can be found in the IBM Datacap Version 9.1.9, interim fix 007 readme file.