QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-22481

Back to search

CVE-2022-22481

Published: May 9, 2022

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

3.7

LOW

Description

IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.

VendorProductVersions

IBM

i

affected
7.2
affected
7.3
affected
7.4

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AC:H/S:U/A:N/C:L/AV:N/I:N/UI:N/PR:N/RC:C/E:U/RL:O

Attack Complexity

High

Scope

Unchanged

Availability

None

Confidentiality

Low

Attack Vector

Network

Integrity

None

User Interaction

None

Privileges Required

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now