CVE-2021-39065

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could...

Authorization

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523...

Authentication flaw

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957...

Design/Logic Flaw

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further...

CVE-2021-39065

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could...

CVE-2021-39064

CVE-2021-39064 affects IBM Spectrum Copy Data Management, specifically versions 2.2.13 and earlier. The root cause is weak authentication and password rules and incorrect handling of default credentials for the Spectrum Copy Data Management Admin console. The result is a potential security bypass...

CVE-2021-39064

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957...

CVE-2021-39058

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 214617...

CVE-2021-39054

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further...

CVE-2021-39053

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending a specially-crafted request, a remote attacker could exploit this vulnerabili...

CVE-2021-39052

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523...

CVE-2021-38947

CVE-2021-38947 affects IBM Spectrum Copy Data Management (2.2.13 and earlier). The root cause is the use of weaker-than-expected cryptographic algorithms, which could enable an attacker to decrypt highly sensitive information. The IBM security bulletin details broader vulnerabilities including cr...

PT-2021-22370 · Ibm · Ibm Spectrum Copy Data Management

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Copy Data Management versions 2.2.13 and earlier Description: The issue is related to weak authentication and password rules, and incorrect handling of default credentials for the Spectrum Copy Data Management Admin console...

PT-2021-22365

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier Description The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit thi...

PT-2021-22363

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier Description The issue allows a remote attacker to access the Spring Boot console without authorization. Recommendations For IBM Spectrum Copy Data Management versions 2.2.13 and...

PT-2021-22328

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations...

PT-2021-22364

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier Description The issue is caused by the improper handling of requests for the Spectrum Copy Data Management Admin Console. A remote attacker could exploit this by sending a...

CVE-2021-39064: Improper Authentication

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957...

PT-2021-22367

Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.13 and earlier Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations...

CVE-2021-39065: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could...