HTTP Header Injection Vulnerability in IBM Spectrum Copy Data Management

CVE-2022-22344

What is CVE-2022-22344?

IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.14.3 are susceptible to an HTTP header injection vulnerability. This security flaw arises from the inadequate validation of input provided in the HOST headers. Attackers may exploit this weakness to launch a range of attacks such as cross-site scripting, cache poisoning, or session hijacking, compromising the integrity and confidentiality of the affected systems. Organizations using the vulnerable versions should implement timely updates or security measures to mitigate the risks associated with this vulnerability.

References