CVE-2022-22348

State
Published
Severity
4.0 Medium
Published
Mar 14, 2022
Updated
Sep 16, 2024
Reserved
Jan 3, 2022

Read the record on cve.org

Description

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.

Scores

CVSSScoreVectorSource
3.04.0 MediumCVSS:3.0/C:L/A:N/AV:L/I:L/S:U/UI:N/PR:N/AC:H/RL:O/E:U/RC:Cibm

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Spectrum Protect Operations CenterIBM
  • 8.1.0.000Affected
  • 8.1.13Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.