CVE-2022-22348

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.

Score
CVSS 3.0 4.0 Medium
Status
Modified - psirt@us.ibm.com
Published
2022-03-14
Last modified
2024-09-16
Weaknesses
CWE-352

Affected products

References