Information Disclosure in IBM Spectrum Copy Data Management

CVE-2021-39053

Summary

IBM Spectrum Copy Data Management versions 2.2.13 and earlier are susceptible to a vulnerability that allows remote attackers to gain unauthorized access to sensitive information. This issue arises from the inadequate management of requests directed at the Spectrum Copy Data Management Admin Console. By crafting and sending a specially designed request, an attacker could exploit this weakness to retrieve confidential data, potentially compromising system integrity and user privacy.

References