Typical severity: High. Likelihood of attack: Medium. In an iFrame overlay attack the victim is tricked into unknowingly initiating some action in one system while interacting with the UI from seemingly completely different system.
Configuration: Disable iFrames in the Web browser. | Operation: When maintaining an authenticated session with a privileged target system, do not use the same browser to navigate to unfamiliar sites to perform other activities. Finish working with the target system and logout first before proceeding to other tasks. | Operation: If using the Firefox browser, use the NoScript plug-in that will help forbid iFrames.