Vulnerability · Published May 9, 2022 · Assigned by ibm
CVE-2022-22481
Low 3.7
In plain English
A low-severity security flaw in i from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).
Severity (CVSS 3.0)3.7Low
Exploit odds (30 days)1.2%top 31.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.
Affected products (as reported)
References
- https://www.ibm.com/support/pages/node/6583553 x_refsource_CONFIRM
- ibm-i-cve202222481-info-disc (225899) vdb-entry, x_refsource_XF