CVE-2022-22348
4
CVSS:3.0/C:L/A:N/AV:L/I:L/S:U/UI:N/PR:N/AC:H/RL:O/E:U/RC:C
Summary
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Spectrum Protect Operations Center | 8.1.0.000 | affected |
| IBM | Spectrum Protect Operations Center | 8.1.13 | affected |
Weaknesses
- Obtain Information
ADP Enrichment
CVE Program Container
Additional References
- https://www.ibm.com/support/pages/node/6562855
- https://exchange.xforce.ibmcloud.com/vulnerabilities/220139
References
- https://www.ibm.com/support/pages/node/6562855
- https://exchange.xforce.ibmcloud.com/vulnerabilities/220139
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.