PT-2021-22364 · Ibm · Ibm Spectrum Copy Data Management

Published 2021-12-13 · Updated 2021-12-15 · CVE-2021-39053

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier

Description The issue is caused by the improper handling of requests for the Spectrum Copy Data Management Admin Console. A remote attacker could exploit this by sending a specially-crafted request to obtain sensitive information.

Recommendations For IBM Spectrum Copy Data Management versions 2.2.13 and earlier, consider restricting access to the Admin Console until a patch is available. As a temporary workaround, avoid using the Admin Console for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-39053

Affected Products

Ibm Spectrum Copy Data Management

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/214524 · Vendor Advisory
• https://ibm.com/support/pages/node/6525554 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-39053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39053 · Security Note
• https://t.me/cibsecurity/33864 · Telegram Post