PT-2022-20916 · Ibm · Ibm Spectrum Copy Data Management

Published 2022-06-10 · Updated 2023-08-08 · CVE-2022-31769

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.15.0

Description The issue allows a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system.

Recommendations For versions 2.2.0.0 through 2.2.15.0, consider restricting access to the PostgreSQL database to minimize the risk of exploitation. As a temporary workaround, restrict access to sensitive product configuration information until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-31769

Affected Products

Ibm Spectrum Copy Data Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-31769 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/228219 · Vendor Advisory
• https://ibm.com/support/pages/node/6593721 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31769 · Vendor Advisory
• https://t.me/cibsecurity/44211 · Telegram Post