Authentication Bypass in IBM Spectrum Copy Data Management

CVE-2022-22426

What is CVE-2022-22426?

IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.15.0 are susceptible to an authentication bypass vulnerability due to improper session management. Local attackers could exploit this flaw to circumvent authentication mechanisms, gaining unauthorized access to the Spectrum Copy Data Management catalog, which contains sensitive metadata. This vulnerability raises significant security concerns, as it may allow malicious actors to manipulate or exfiltrate critical data without proper authentication. Prompt assessment and remediation of this issue are crucial for safeguarding data integrity.

References