CVE-2019-12490: Medium severity ibm infosphere guardium z/os vulnerability
An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links.
Other sources
Simple Machines Forum (SMF) could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. By persuading a victim to visit a specially-crafted Web site, an attacker could exploit this vulnerability to obtain credentials.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-12490?
CVE-2019-12490 is a vulnerability in Simple Machines Forum (SMF) before version 2.0.16 that allows remote attackers to bypass security restrictions.
How does CVE-2019-12490 impact IBM Security Guardium?
CVE-2019-12490 may impact IBM Security Guardium versions 11.3, 11.4, and 11.5, if the affected version of Simple Machines Forum (SMF) is installed.
What is reverse tabnabbing?
Reverse tabnabbing is a technique that allows an attacker to exploit the trust a user has in a website by redirecting them to a malicious site after they have interacted with a legitimate link on the attacker's website.
How can an attacker exploit CVE-2019-12490?
An attacker can exploit CVE-2019-12490 by convincing a victim to visit a specially-crafted website, allowing the attacker to obtain the victim's credentials.
How can I fix CVE-2019-12490?
To fix CVE-2019-12490, upgrade Simple Machines Forum (SMF) to version 2.0.16 or later.