Remote Information Disclosure in IBM Spectrum Copy Data Management

CVE-2022-31769

What is CVE-2022-31769?

A vulnerability exists in IBM Spectrum Copy Data Management versions 2.2.0.0 to 2.2.15.0 that permits a remote attacker to disclose sensitive product configuration information stored in PostgreSQL databases. This exposure may facilitate additional attacks against the system, presenting a security risk for affected environments. To mitigate this risk, users should consider updating to a patched version and reviewing their security settings.

References