PT-2021-22365 · Ibm · Ibm Spectrum Copy Data Management

Published 2021-12-13 · Updated 2021-12-15 · CVE-2021-39054

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier

Description The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this to hijack the victim's click actions and possibly launch further attacks against the victim.

Recommendations For IBM Spectrum Copy Data Management versions 2.2.13 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2021-39054

Affected Products

Ibm Spectrum Copy Data Management

References · 5

• https://ibm.com/support/pages/node/6525554 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/214525 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-39054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39054 · Security Note
• https://t.me/cibsecurity/33874 · Telegram Post