CVE-2022-22348

published 2022-03-14

CVE-2022-22348: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within…

low 2.4 CVSS 3.1

AV N AC L PR H UI R S U C N I L A N

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	spectrum_protect_operations_center	—	—
ibm	spectrum_protect_operations_center	—	—
ibm	spectrum_protect_operations_center	>= 8.1.0.000 < 8.1.14.000	8.1.14.000

CWE-352