Vulnerability · Published Jun 10, 2022 · Assigned by ibm
CVE-2022-22426
Low 2.9
In plain English
A low-severity security flaw in Spectrum Copy Data Management from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.0)2.9Low
Exploit odds (30 days)0.2%top 84.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Spectrum Copy Data Management | 2.2.0.02.2.15.0 |
References
- https://www.ibm.com/support/pages/node/6593721 x_refsource_CONFIRM
- ibm-spectrum-cve202222426-info-disc (223718) vdb-entry, x_refsource_XF