Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Join us in NYC Sept 4th for Qlik's AI Reality Tour! Register Now
cancel
Showing results for 
Search instead for 
Did you mean: 
fkeuroglian
Partner - Master
Partner - Master

Clickjacking vulnerability

Hi Expert

Security team of my company, said me that the qliksense server has a CLICKJACKING VULNERABILITY, and send me the attached report like the image show.

After research, i  see this support post https://support.qlik.com/articles/000066253 and modify the VIRTUAL PROXY like it said.

in advance option in Virtual proxy set this : X-Frame-Options: DENY

After that, restart the services, restart the server, and the vulnerability is still there.

is there any more to do to take out this vulnerability? Somebodoy have any recommendation?

Thanks a Lot

Fernando

Labels (2)
0 Replies