CVE-2022-22348
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.
- Score
- CVSS 3.0 4.0 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2022-03-14
- Last modified
- 2024-09-16
- Weaknesses
- CWE-352
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/220139
- https://www.ibm.com/support/pages/node/6562855