SB2015111903 - Security Features in Mandriva Enterprise Server
Published: November 19, 2015 Updated: August 9, 2020
Security Bulletin ID
SB2015111903
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Security Features (CVE-ID: CVE-2015-4112)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.
Remediation
Install update from vendor's website.