CVE-2020-4406

CVE-2020-4406 describes a clickjacking vulnerability in the web user interfaces of IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management across various Linux, Windows, and AIX versions. A remote attacker could exploit this by tricking a victim into visiting a malicious website, thereby hijacking their click actions and potentially launching further attacks. Rated as Medium severity with a CVSS score of 5.4, the attack requires user interaction and low privileges but has low attack complexity, potentially impacting confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.