CVE-2022-30610

Vulnerability

IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.15.0 are vulnerable to reverse tabnabbing. The vulnerability occurs when an administrator adds a link to a malicious URL; when another administrator clicks that link, the original page can be rewritten by the linked page. This is due to insufficient validation of the target attribute or lack of rel="noopener noreferrer" on external links.

Exploitation

An attacker must have administrator privileges to insert a malicious link into the application (e.g., in a configuration field or report). The attacker then lures another administrator into clicking the link, which opens a new tab or window. The malicious page can then use window.opener to modify the original page's content, presenting a phishing form.

Impact

If successful, an attacker can overwrite the legitimate IBM Spectrum Copy Data Management interface with a phishing page, potentially stealing credentials or other sensitive information from the victim administrator. The attack targets the integrity and confidentiality of user data via social engineering.

Mitigation

IBM has released a fix as part of a security update. Administrators should upgrade to the latest version of IBM Spectrum Copy Data Management as specified in the security bulletin [1]. No workarounds are available.