PT-2022-15425 · Ibm · Ibm Spectrum Copy Data Management

Published 2022-06-10 · Updated 2023-08-08 · CVE-2022-22426

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management Admin versions 2.2.0.0 through 2.2.15.0

Description The issue is caused by the lack of proper session management, allowing a local attacker to bypass authentication restrictions. This could enable an attacker to gain unauthorized access to the Spectrum Copy Data Management catalog, which contains metadata.

Recommendations For versions 2.2.0.0 through 2.2.15.0, update to a version that includes proper session management to prevent authentication bypass. As a temporary workaround, consider implementing additional authentication measures to restrict access to the Spectrum Copy Data Management catalog.

Fix

Related Identifiers

CVE-2022-22426

Affected Products

Ibm Spectrum Copy Data Management

References · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/223718 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22426 · Security Note
• https://ibm.com/support/pages/node/6593721 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22426 · Vendor Advisory
• https://t.me/cvenotify/31791 · Telegram Post
• https://t.me/cibsecurity/44214 · Telegram Post