CVE-2021-3669

CVE-2021-3669 is a Linux kernel vulnerability where measuring shared memory usage does not scale with large shared memory segment counts, enabling resource exhaustion and DoS. Connected sources confirm the issue affects multiple kernel versions and distributions, with remediations following vendo...

CVE-2022-22354

CVE-2022-22354 affects IBM Spectrum Protect Plus (10.1.0.0–10.1.9.2) and IBM Spectrum Copy Data Management (2.2.0.0–2.2.14.3). The issue is that connections are not length-limited, enabling a Slowloris HTTP denial-of-service attack that can render the Admin Console unresponsive. Affected products...

CVE-2022-31769

Summary (concrete details available): IBM Spectrum Copy Data Management versions 2.2.0.0–2.2.15.0 are affected by an information disclosure vulnerability that could allow a remote attacker to view product configuration information stored in PostgreSQL. Root cause per sources is lack of protection...

CVE-2021-39055

This CVE affects IBM Spectrum Copy Data Management (version 2.2.0.0 through 2.2.14.3). The root cause is an XSS vulnerability in the Web UI due to insufficient input validation/filtering, enabling an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sess...

CVE-2022-22344

The CVE-2022-22344 issue affects IBM Spectrum Copy Data Management, specifically the HOST header input validation in versions 2.2.0.0 through 2.2.14.3. The root cause is improper validation of HOST headers, enabling HTTP header injection that could lead to cross-site scripting, cache poisoning, o...

CVE-2021-39051

CVE-2021-39051 affects IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.14.3. The vulnerability is a server‑side request forgery (SSRF) caused by improper input handling in the application server registration function. A remote attacker can craft the host address and port fields in ...

CVE-2022-30611

CVE-2022-30611 affects IBM Spectrum Copy Data Management versions 2.2.0.0–2.2.15.0. The vulnerability is a cross-site scripting flaw caused by improper validation of user-supplied input, enabling a remote attacker to inject malicious script into a page viewed in a victim’s browser within the host...

CVE-2022-22426

CVE-2022-22426 affects IBM Spectrum Copy Data Management Admin versions 2.2.0.0–2.2.15.0. The issue is a failure in session management enabling a local attacker to bypass authentication and access the Spectrum Copy Data Management catalog metadata. The vulnerability is classified as LOW severity ...

CVE-2022-22479

CVE-2022-22479: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site request forgery (CSRF), enabling an attacker to trigger malicious actions trusted by a user. The vulnerability affects the listed 2.2.x releases and is documented across multiple sources, includ...

CVE-2022-30610

IBM Spectrum Copy Data Management 2.2.0.0–2.2.15.0 is affected by a reverse tabnabbing vulnerability that could allow a linked page to rewrite the original page with a phishing page after an administrator clicks a malicious URL. The issue is confirmed across multiple sources in the connected docu...

CVE-2021-39054

Summary : CVE-2021-39054 affects IBM Spectrum Copy Data Management 2.2.13 and earlier, allowing a remote attacker to hijack a victim’s click actions by tricking them to visit a malicious website. This can potentially enable further attacks. The CVSS metrics provided: CVSSv3.1 base score 5.4 (NETW...

CVE-2021-38947

CVE-2021-38947 affects IBM Spectrum Copy Data Management (2.2.13 and earlier). The root cause is the use of weaker-than-expected cryptographic algorithms, which could enable an attacker to decrypt highly sensitive information. The IBM security bulletin details broader vulnerabilities including cr...

CVE-2021-39065

IBM Spectrum Copy Data Management 2.2.13 and earlier is affected by an input-validation vulnerability in the Admin Console login and uploadcertificate function that could enable remote command execution. The root cause is improper validation of user-supplied input, allowing an attacker to inject ...

CVE-2021-39053

Summary: CVE-2021-39053 affects IBM Spectrum Copy Data Management (2.2.13 and earlier). It allows a remote attacker to obtain sensitive information via improper handling of requests to the Spectrum Copy Data Management Admin Console. Affected versions: 2.2.13 and below. Root cause: improper handl...

CVE-2021-39058

CVE-2021-39058 affects IBM Spectrum Copy Data Management, listing weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Public sources (NVD entry) describe the affected product as IBM Spectrum Copy Data Management 2.2.13 and earlier. T...

CVE-2021-39052

IBM Spectrum Copy Data Management (version 2.2.13 and earlier) contains a remote authentication bypass that could allow an attacker to access the Spring Boot console without authorization. The issue is documented as CVE-2021-39052. Affected product details and impact are stated in the vulnerabili...

CVE-2021-39064

CVE-2021-39064 affects IBM Spectrum Copy Data Management, specifically versions 2.2.13 and earlier. The root cause is weak authentication and password rules and incorrect handling of default credentials for the Spectrum Copy Data Management Admin console. The result is a potential security bypass...