4.0
Medium
CVE-2022-22348 IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could…
Description
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Protect Operations Center 8.1 | 8.1.0.000 → 8.1.13 | No fix stated |
Other CVEs of Spectrum Protect Operations Center
The 10 CVEs of Spectrum Protect Operations Center →
CVE-2022-22494
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the…
3.7
Low
CVE-2022-22484
IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information,…
5.1
Medium
CVE-2022-22346
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which…
4.3
Medium
CVE-2021-38901
IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly…
5.1
Medium