CVE-2022-30610

State
Published
Severity
4.4 Medium
Published
Jun 10, 2022
Updated
Sep 16, 2024
Reserved
May 12, 2022

Read the record on cve.org

Description

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 227363.

Scores

CVSSScoreVectorSource
3.04.4 MediumCVSS:3.0/A:N/AV:N/UI:N/AC:H/I:H/S:U/C:N/PR:H/RC:C/RL:O/E:Uibm

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Spectrum Copy Data ManagementIBM
  • 2.2.0.0Affected
  • 2.2.15.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.