CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2022-05-17

Last modified

2024-09-16

Weaknesses

CWE-312

Affected products

• Spectrum Protect (Ibm)
• Spectrum Protect Operations Center (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/226322
• https://www.ibm.com/support/pages/node/6586314