CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account…

Medium · published May 17, 2022

CVSS v3.0
5.1
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322.

The record
Technical detail
CVSS v3.0
5.1 · MEDIUM
Vector
CVSS:3.0/AC:H/A:N/AV:L/PR:N/S:U/C:H/I:N/UI:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Published
2022-05-17T16:00Z
EPSS history
Timeline
  • 17 MAY 16:00Z
    IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account…
    cvelistv5