CVE-2022-22481

 

Published at: - 09-05-2022 07:15

Last modified: - 17-05-2022 06:25

Total changes: - 2

Description

IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

 

Verification logic

 

Reference

• https://www.ibm.com/support/pages/node/6583553
• ibm-i-cve202222481-info-disc (225899)-VDB Entry, Vendor Advisory

 

Keywords

NVD

 

CVE-2022-22481

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures