Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-39051
HistoryMar 14, 2022 - 5:15 p.m.

CVE-2021-39051

2022-03-1417:15:07
CWE-918
[email protected]
web.nvd.nist.gov
5
ibm spectrum copy data management
server-side request forgery
remote attacker
application server registration
ibm x-force id

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

41.2%

JSON

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Force ID: 214441.

Affected configurations

Nvd
Node
ibmspectrum_copy_data_managementRange2.2.0.0–2.2.15.0
VendorProductVersionCPE
ibmspectrum_copy_data_management*cpe:2.3:a:ibm:spectrum_copy_data_management:*:*:*:*:*:*:*:*

Related

prion 1
cnvd 1
cvelist 1
cve 1
ibm 1
prion
prion
Server side request forgery (ssrf)
2022-03-14 17:15:00
cnvd
cnvd
IBM Spectrum Copy Data Management has an unspecified vulnerability
2022-03-16 00:00:00
cvelist
cvelist
CVE-2021-39051
2022-03-14 16:45:18
cve
cve
CVE-2021-39051
2022-03-14 17:15:07
ibm
ibm
Security Bulletin: IBM Spectrum Copy Data Management is vulnerable to Slowloris, HTTP header injection, XSS, and CSRF (CVE-2022-22354, CVE-2022-22344, CVE-2021-39055, CVE-2021-39051)
2022-03-12 02:43:24

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

41.2%

JSON
Related for NVD:CVE-2021-39051
prion1cnvd1cvelist1cve1ibm1