IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/223718 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6593721 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
17 Jun 2022, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 3.3 |
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_copy_data_management:*:*:*:*:*:*:*:* |
|
| References | (CONFIRM) https://www.ibm.com/support/pages/node/6593721 - Patch, Vendor Advisory | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/223718 - VDB Entry, Vendor Advisory |
10 Jun 2022, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-10 16:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-22426
Mitre link : CVE-2022-22426
CVE.ORG link : CVE-2022-22426
JSON object : View
Products Affected
ibm
- spectrum_copy_data_management
linux
- linux_kernel
CWE