IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing

IBM Engineering Lifecycle Optimization - Engineering Insights contains links that can be manipulated to redirect users to malicious websites without proper validation. An attacker can trick users into visiting a fake site that steals their information or performs unwanted actions on their browser.

The application uses unvalidated external links (tabnabbing vulnerability) that allow a remote attacker to redirect users to untrusted domains. This can lead to session hijacking, credential theft, or execution of unauthorized actions in the victim's authenticated context.