PT-2022-15461 · Ibm · Ibm Navigator For I

Mohamed Shaban · Published 2022-05-09 · Updated 2023-08-08 · CVE-2022-22481

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Navigator for i versions 7.2 through 7.4

Description The issue allows a remote attacker to obtain access to the web interface without valid credentials by modifying the sign on request. This grants the attacker visibility to the fully qualified domain name of the target system and the navigator tasks page. However, the attacker does not gain the ability to perform tasks on the system or see any specific system data.

Recommendations For versions 7.2 through 7.4, update to a version that includes the fix for this issue to prevent unauthorized access to the web interface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-22481

Affected Products

Ibm Navigator For I

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/225899 · Vendor Advisory
• https://ibm.com/support/pages/node/6583553 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22481 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22481 · Security Note
• https://t.me/cibsecurity/42195 · Telegram Post