CVE-2022-22484: Medium severity IBM Spectrum Protect Operations Center vulnerability
IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322.
Other sources
IBM Spectrum Protect Operations Center could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-22484?
CVE-2022-22484 is a vulnerability in IBM Spectrum Protect Operations Center.
How does CVE-2022-22484 impact IBM Spectrum Protect Operations Center?
CVE-2022-22484 allows a local attacker to obtain sensitive information by accessing the browser's application command history.
Which versions of IBM Spectrum Protect Operations Center are affected by CVE-2022-22484?
IBM Spectrum Protect Operations Center versions 8.1.12 and 8.1.13 are affected by CVE-2022-22484.
What is the severity of CVE-2022-22484?
The severity of CVE-2022-22484 is medium.
How can the vulnerability CVE-2022-22484 be fixed?
To fix CVE-2022-22484, it is recommended to upgrade to a version of IBM Spectrum Protect Operations Center that is not affected by the vulnerability.