Skip to content
OpenAdvisories
Low · 2.9 CVE-2022-22426 EUVD-2022-27572GHSA-gr2p-rq43-h8cc

IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused…

Published Jun 10, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718.

Affected products

VendorProductAffectedFixed
IBM Spectrum Copy Data Management 2.2.0.0, 2.2.15.0 —

References