CVE-2022-22484 Vulnerability Details

  /     /     /  

CVE-2022-22484 Metadata Quick Info

CVE Published: 17/05/2022 | CVE Updated: 16/09/2024 | CVE Year: 2022
Source: ibm | Vendor: IBM | Product: Spectrum Protect Operations Center
Status : PUBLISHED

---

CVE-2022-22484 Description

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser\'s application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts\' passwords. IBM X-Force ID: 226322.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Obtain Information
Source: IBM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).