CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ibmCNA
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
Affected Products (NVD)
VendorProductVersion
ibmspectrum_protect
8.1.12.000 ≤
𝑥
< 8.1.14
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ibmspectrum_protect_operations_center
8.1.13
CNA
ibmspectrum_protect_operations_center
8.1.12
CNA
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/226322
https://www.ibm.com/support/pages/node/6586314
https://exchange.xforce.ibmcloud.com/vulnerabilities/226322
https://www.ibm.com/support/pages/node/6586314